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PREFACE 


The objectives of the NASA Aerospace Safety Research and Data 
Institute (ASRDI) are: 

(a) To support NASA, its contractors and the aerospace 
industry with technical information and consulting 
on safety problems. 

(b) To identify areas where safety problems and technology 
voids exist and to initiate research programs both in- 
house and on contract in these problem areas. 

(c) To author and compile state-of-the-art and summary 
publications in our areas of concern. 

(d) To establish and operate a Safety Data Bank. 

In pursuing these objectives, ASRDI has assumed the responsibility 
for publishing two documents resulting from an effort initiated and 
supported by the NASA Headquarters Safety Office (DY) . 

The first of these documents is: 

General Electric Co., Daytona Beach., Manned Space Programs 
Accidents/Incidents Sunmaries (1963-1969), March 1970, NASA, 
Director, Manned Space Flight Safety, NASW-410 (Safety Task), 
NASA -CR- 120998 . 

This document is being reprinted to fill current needs. 

The second of these documents is: 

Cranston Research Inc., Manned Space Programs Accident/ 

Incident Summaries (1970-1971), April 1972, NASA Headquarters 
Safety Office, Charles W, Childs, Program Manager, NASW-2225, 
NASA -CR -120999. 

This is the initial printing of this report. 


Frank E. Belles 

Director of Aerospace Safety 

Research and Data Institute 


iii 




FOREWORD 


This document has been compiled to update the Manned 
Space Programs accident/incident experience information pre- 
sented in NASA Safety Program document. Manned Space Programs 
Aocident/Incident Summaries, dated March 1970. It should be 
used in conjunction with the March 1970 document to obtain 
full visibility of the ways of preventing repetition of 
accidents/incidents in future programs. 

The March 1970 document is based on accidents/incidents 
experienced in the calendar years 1963 through 1969. This 
document is based on accident/incident experience in the 
calendar years 1970 and 1971. 

The statistical information in this document Includes a 
restatement of the significant statistical information in the 
March 1970 Summaries for comparison with the new information; 
and an integration of the total information to provide statis- 
tical summaries covering some nine (9) years of Manned Space 
Program activities. 

As with the March 1970 document, the compilation of this 
document was made possible through the understanding and support 
provided by management and safety personnel of NASA Headquarters, 
NASA Field Centers, and NASA contractors. 
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PART I. INTRODUCTION 


Purpose and Objective 

This compilation of accident /incident information relative to 
space programs has been prepared as part of the NASA Manned 
Space Flight Safety Program. The basic documentation of this 
information is coruainec. in NASA Safety Program Doc* nent. 

Manned Soace Programs Accident/Incident Summaries, March 
1970, on experience through the calendar years 1963-1969. 

This document is an update of the basic document to acid 
accident/incident exoerience gained during calendar years 
1970 and 1971* The objective of this compilation is to con- 
tribute to safety : :y making available to government agencies 
ani. industrial concerns ^he significant lessors learned from 
the accident/incident experience of Marine* > Space Flight Pro- 
grams. No reference ias beer, mode in the mbiimaries as to 
location, facilities, companies, organ izat ions, products, 
programs, or indi\ inuals involveu. Tne document has been 
prepared primarily’ for the u^e of management, supervisory, 
engineering, and safety personnel on space programs. For most 
effective use in future programs, the individual accidents/ 
incidents recorded herein must be interpt^eved by program special - 
ists for application to potential hazards of the particular 
program or systems involveu . For the assistance of management 
in evaluating the potentially hazardous phases of a program. 


statistical summaries of cause factors ant ot uer significant 



information pertaining to accident prevention in future pro- 
grams has been provided. 

B- Information Sources 

The summaries contained herein were compiled from existing 
documentation of accidents or incidents on Manned Space Flight 
Programs. In compiling the basic document, approximately 
10,000 case documents were reviewed, from which a total of 
509 summaries was selected. Records reviewed included exist- 
ing records of NASA Headquarters, NASA Field Centers concerned 
with space programs, and eighteen (IS) contractors, associate 
contractors and subcontractors on space programs. In compiling 
the information for this document, over 5000 case documents 
were reviewed at NASA Headquarters, NASA field centers, and 
five (5) ma;jor contractors, resulting in the selection of an 
additional 223 summaries. No attempt was made to summarize 
anomalies which occurred during manned space flight missions. 
The majority of the accidents/incidents selected occurred 
during various phases of the Apollo Program with the remainder 
selected from other manned space programs. 

C. Criteria Used 

Each accident/incident summary contained in Part III has been 
summarized by description, cause and recommended preventive/ 
corrective action. The criteria used for each of these summary 
segment's are defined below: 
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1. Descriptions 


Accidents/ incidents were selected from records on the basis 
of the following criteria; 

a. h n occurrence which reflected a significant lesson of 
importance to future programs. 

b. The occurrence involved space programs flight vehicle 
systems, hardware or ground support equipment and 
facilities providing <. direct support to space programs. 

c. T >e occurrence resulted in personnel fatality/injury, 
and/or caused damage to program systems, hardware, 

GSE and facilities or resulted in a potentially hazard- 
ous condition. 

The description for each eccident/incident relates what 
happened; hov; it happened; the phase of the program activity 
involved; hardware, equipment and/or facilities damaged; 
personnel injuries act datalities incurred or potential 
hazards created. 

The description of what happened has included the event that 
caused the accident/incident to occur. For example, "a gage 
blew up and injured one person during development test of an 
engine, due to inadvertent cross connection of high and low 
pressure systems. Here, the first order cause factor was 
included as part of the description of what happened and per- 
mits concentration in the cause section on the second order 
of causes related to why it happened . This was done because 
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it is believed that too often cause factors have not been 
identified in sufficient depth to provide guidelines for 
management or supervisory corrective programs. 

Causes 

The causes identified in the "Cause tT sections reflect the 
judgment of the reviewing teams based upon information pro- 
vided in the accident/incident records. In many cases, the 
reports were supplemented by discussions with key people 
to more accurately identify cause factors. The second order 
cause factors considered were hardware or software deficiencie 
as determined by the following criteria; 
a. Hardware Deficiencies 

0 Material Failure - Material failure as used in cause 
determinations was defined as any failure of materials 
or components in development tests at less than design 
specification or failure trader operational conditions. 

0 Design Deficiency - This cause factor was defined as 
any design specification inadequacy, resulting in 
deficient hardware which contributed to the occurrence 
of an accident/incident. Factors considered v;ere 
omission of essential information, failure to specify 
safety devices or warnings, failure to determine 
stress/fatigue and other operational/ interface factors, 
errors in material selection, or clerical errers in 
drawings and specifications. 
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Materials Incompatibility - Materials incompatibility 
was defined as any cause in which incompatible 
materials were brought together through a design 
error, installation error, or procedural error. 

0 Malfunctions - Malfunctions were defined as any 

anomaly where a system, subsystem or component failed 
to function as intended, resulting in conditions 
which contributed to accidents/incidents. 

Software Deficiencies 

° Procedural - A procedural deficiency was defined as 
any case in which formal procedures contributed to 
accident/incident causes as a result of failure to 
prepare procedures, failure to follow procedures, 
deviations from procedures during a test, failure to 
coordinate concurrent tests, omissions of essential 
information in procedures, clerical errors in pro- 
cedures, use of wrong procedures, or failure to up- 
date procedures. 

° Planning - A planning deficiency was defined as any 
case where the cause of an accident/incident was due 
to failure to properly plan prior to an event. In- 
cluded in these considerations were lack of or 
inadequate test planning, failure to perform pre- 
operations hazard analysis, deficiencies in planning 
for transportation, handling and storage, and failure 
to determine necessary equipment and personnel re- 
sources for an operation. 


° Work Control - Work control deficiency was defined 
as any condition contributing to an accident/incident 
during installation, maintenance, storage, cleaning, 
repair, and fabrication of systems. Factors con- 
sidered as work control deficiencies were inadequate 
records, inadequate area control, failure to exercise 
proper control over materials, failure to properly 
mark and identify equipment and failure to define 
work requirements. 

0 Management/Supervisorv - This cause factor was defined 
to include errors in decisions, policies, or direct- 
ives which contributed to the occurrence of accident/ 
incidents. Included was failure to perform manage- 
ment or supervisory responsibilities for planning; 
training and certifying personnel; and failure to 
perform personnel surveillance of critical activities. 

0 Training - This category was defined as any deficiency 
In workmanship or duty performance in which lack of 
training, briefing, certification or specific work 
instructions contributed to an accident/incident. 

° Inspection - An inspection deficieicy was defined as 
any condition contributing to an occurrence in which 
inspection was involved through failure to verify, 
failure to maintain inspection records or errors in 
inspection records. 


3. Recommended Corrective/Preventive Action 

In this part, an effort was made to reflect all recommenda- 
tions included in the reports reviewed. In many cases, 
recommended corrective/preventive actions in individual 
reports were keyed solely to the one event, and not necess- 
arily broadly applicable to other similar events. In those 
cases, the recommended corrective actions were evaluated 
and extrapolated for application generally to like systems 
on future programs. Also, since cause factors were con- 
sidered in terns of hardware or software deficiencies, the 
recommended corrective/preventive action was generally 
oriented to these cause factors. 


7 



PART II, STATISTICAL SUMMARY 


A. Approach 

The statistical information presented in this document is de- 
signed to present graphically that information considered to 
be of value to management. The charts at the end of this Part 
show the distribution of accidents by system categories, cause 
factors and program activities. The information provided in 
these charts represents accident/incident statistical informa- 
tion over an approximate nine (9) year period. In each chart, 
a bar-graph is presented to show accident/incident experience 
over: 

1. The 1963 through 1969 period (March 1970 Summary period) 

2. The 1970 and 1971 period (update period) 

3. The 1963 through 1971 period (total period) 

B. Findings 

By the method of display, management is provided with a basis 
for relating program events to accident/incident data for the 
time periods shown. Some of the more significant information 
shown in the charts is summarized below. Although the accidents/ 
incidents in the 1970-71 period generally followed the same 
distribution as the 1963-69 period, there were some significant 
changes over the last two (2) years. 

1. Distribution by Systems 

Of the ten (10) system categories shown in Chart 1, Pressure 
Systems and Facility/Ground Support Equipment were the two 
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systems having the highest percentage involvement over 
the total period; although there was a significant de- 
crease (23% to 9%) in Pressure Systems involvement, and 
a significant increase (18% to 35%) in Facility/Ground 
Support Systems involvement in the 1970-71 period. The 
percentage involvement over the total period for these 
systems were: 

a. Facility/Ground Support Systems 24% 

b. Pressure Systems 19% 

Ordnance Systems continued to show the lowest involvement, 
with no recorded accident/incident in the 1970-71 period. 
Distribution by Causes 

The distribution of accidents/incidents by cause factors 
is shown in Chart 2. Software deficiencies were a greater 
contributor to accidents/incidents than Hardware deficiencies 
and procedures, work control and inspection were the most 
significant Software cause factors, 
a. Hardware Deficiencies 

Hardware deficiencies wore, for the most part, related 
to design deficiencies . The number of cases in which 
design deficiencies contributed to or caused accidents/ 
incidents was significantly higher than those caused 
by material failures or malfunctions, although there 
was a significant decrease (37% to 17%) in design de- 
ficiency causes in the 1970-71 period. In 31% of the 



732 cases, a desire deficiency was identified, whereas 
only $% of the cases involved material failure as a 
cause and only 6% involved malfunctions . Material 
failure causes increased (3% to 8%) , and malfunction 
causes decreased f 8>% to 1%) in the 1970-71 period. 

Cases involving malfunctions occurred mostly during 
operational tests and manufacturing checkout. Like- 
wise, the number of cases where material incompatibility 
contributed to the cause of accidents/incidents was 
relatively small, only 3 c ,i of the 732 cases; however, 
some very serious accidents occurred as a result of 
this factor. 

Software Deficiencies 

The number of cases involving procedural deficiencies 
was significantly high and constituted the single 
largest contributor to accidents/incidents causes with 
of the 732 cases. Likewise, the number of related 
work control deficiencies was quite high. This area 
was a very significant factor in accident/incident 
causes and constituted the second largest contributor 
with 315' of the 732 cases. 

Management or supervisory deficiencies were involved in 
1% of the 732 cases. Six percent (6%) of the cases in- 
volved planning deficiencies and 9 % of the accidents/ 
incidents involved training deficiencies. In many 


cases, training deficiencies pertained to inadequate 
knowledge of the total operation. Individuals were 
not well enough informed of other work going on con- 
currently and/or what the previous shift had done as 
shown by the fact that 3% of the accidents/incidents 
involved failure to transfer essential information 
during shift changes . Although inspection deficiencies 
were not the primary cause of accidents/incidents, in- 
spection was a major contributing factor since many 
accidents/incidents could have been prevented had there 
been sufficient and timely inspection and verification. 

For example, in 3% of the cases, there were cross 
connections of lines or cables which could have been 
prevented by inspection. Twenty-three percent (23%) 
of the accidents/incidents involved inspection defici- 
encies. 

Distribution by Program Activity 

As records were reviewed, the accidents/incidents were identi- 
fied to a program activity. The results of this compilation 
are shown in Chart 3. As shown in the chart, more of the 732 
accidents/incidents occurred during operational test and 
checkout than in any other program activity, accounting for 
45% of the total. Manufacturing was also a significant 
source of accidents/incidents , with 34 % of the cases occurring 
during this activity. 



4. Distribution by Accidents vs. Incidents 


The distribution of accidents/incidents was based on 
NHB 1700.1 definitions (Type A, Type B f Incident) and the 
Identifications in the case documents reviewed. The 
distributions are; 


Period 

Accidents 

Incidents 

1963-1969 

17% 

83% 

1970-1971 

13% 

87% 

1963-1971 

16% 

84% 

Distribution by Work 

Shift 



The statistical summary of accidents/incidents by work 
shifts revealed a rather direct relationship to the level 
of activity or the number of people involved in each shift. 
With most of the work done on the day shift, as would be 
expected, the majority of cases occurred on the first shift. 
Although risks may have been higher, per level of activity, 
on second and third shifts, data was not available to make 
this correlation. Distribution of cases by shift was as 


follows : 




Period 

First Shift 

Second Shift 

Third Shift 

1963-1969 

65% 

26% 

9% 

1970-1971 

81% 

12% 

7% 

1963-1971 

70% 

22°% 

8% 
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6* Distribution by Calendar Quarters 

The seasonal distribution of accident s/incidents by calendar 


quarters was compiled 

as Follows: 
1963-69 

1970-71 

1963-71 

First Quarter 
(Jan., Feb., Mar.) 

29% 

3055 

29% 

Second Quarter 
(April, May, June) 

24% 

24% 

24% 

Third Quarter 
(July, Aug., Sept.) 

27% 

2255 

25% 

Fourth Quarter 
(Oct., Nov., Dec.) 

20% 

24% 

21% 


inis distribution could not be correlated to any particular 
factor, and the variation in distribution was not enough to 
be significant. 

7. Injuries/Fatalities/Damage 

Records compiled on percentage of accidents/incidents which 
involved injuries, fatalities, or damage shotted the foilwing: 

% OF THE TOTAL 



1963-69 

1970-71 

1963-71 

Injuries 

15% 

20% 

17% 

Fatalit ies 

1% 

-C 1% 

1% 

Damage (hardware, facilities, 
equipment) 

68% 

66% 

67% 


In a number of the cases, personnel injury or fatality, as 
well as damage, occurred. A number of incidents were included 
in the summaries where there were no injuries, fatalities, or 
damage, but the incident created a high hazard potential. For 
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these reasons, the percentages shown do not cumulatively 
represent all the accident s/incidents summarized. 

Human Error 

Separate emphasis was not given to human error in identify- 
ing cause factors unless it was apparent in a report, be- 
cause human error would be present to some degree in most 
unplanned events. Emphasis was placed, however, upon 
determing what caused or contributed to the human error 
and, as the accident/incident records were reviewed, a 
notation was made as to whether or not human error was 
directly involved in the cause of the accident. Based upon 
a simple yes or no determination of direct or indirect human 
error involvement, the following percentages of cases in- 
volved human error as a factor to the cause of accidents/ 
incidents. The majority of these cases involved second- 
order causes. Human error involvement could probably have 
been identified in the remainder of the cases had more in- 
formation been available: 


1963-69 

74 % 

1970-71 

12 % 

1963-71 

73 % 


The following percentages of cases, where an individual act 
of carelessness or irresponsibility at the time of the 
occurrence was the only cause, were identified; 


1963-69 


< 1 % 


1970-71 9% 

1963-71 '■v' 3 % 

In practically all the cases there were Indications that 
management and supervisory deficiencies were indirectly 
involved in accident/incident causes even though deficiencies 
were not specifically identified in the reports and documents 
reviewed. 
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1. Design and development tests are 
those oases in which an unplanned 
event occurred during Qualification 
or Development testing. 

2. Manufacturing includes those cases 
involving functional checkout of 
systems, subsystems or components. 

3. Installation and maintenance includes 
all cases occurring during installation 
and maintenance of facilities, systems, 
GSE or flight systems. 

4. Operational test and checkout includes 
all tests of assembled vehicles and all 
testing at field sites, including 
integrated tests and pre-launch 
checkout. 
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SECTION I 
CRYOGENIC SYSTEMS 


Accident/incident 

Description 

During LOX tanking from 
barge-mounted storage 
tanks, the replenish 
pump cm the barge caught 
fire internally and ex- 
ploded, resulting in 
a fire and damage to the 
barge and adjacent barge 
and dock area. 


During planned LOX 
discharge from a storage 
tank into a drainage 
ditch three automobiles 
in the area caught fire 
and were destroyed. One 
driver narrowly escaped 
severe injury. 


Causes 

Failure of monitoring 
personnel to note and report 
abnormally low pump radial 
bearing temperature. Con- 
tributing were material 
failure in that the pump 
shaft thrust bearing failed 
due to suv oil seal leak at 
50 psi pressure; and in- 
adequate design in having 
no automatic signal to warn 
of abnormal pump conditions. 


Personnel error in that em- 
ployees who were handling the 
road block operations, during 
the IX)X discharge, drove autos 
Into an area where LOX vapor 
clouds were present. Contri- 
buting were inadequate controls 
and procedures governing move- 
ment or activity in areas where 
IDX vapor clouds can be antici- 
pated. 


Recommended 
Pr e vent 1 ve/Corr e c t i ve 
Action 


Designate all LOX handling 
operations as hazardous 
and require training and 
certification of all personnel. 
Require use of welded 
stainless steel oil seals 
rated at 150 psi for LOX 
pump applications. Require 
all LOX-handling equipment 
monitoring Instrumentation to 
pro/ide automatic warning 
of abnormal operating 
temperatures. 


Designate LOX discharge 
operations as hazardous and 
require safety inspection 
and approval prior to any 
discharge. Ensure the 
placement of area caution and 
warning devices prior to 
U)X discharge operations 
and/or institute positive 
traffic control procedures 
around LOX discharge areas. 



SECTION I 
CRYOGENIC SYSTEMS 


Accident/incident 

Description 

52. While a H 2 sample was 
being prepared for 
analysis one of two 
cryogenic sample bottle 
discs ruptured and the 
gas ignited, injuring 
one employee. 


53- During manufacture check- 
out of a spacecraft 
cryogenic shelf, metallic 
chips were detected in 
the cryogenic disconnect 
and in the ground half 
pressure operated discon- 
nect (POD) of tank 2 
vent line. Chips also 
were found in tank 1. 


Causes 

A material deficiency in 
that the disc was extensive- 
ly corroded and failed under 
working gas pressure. Con- 
tributing causes were inade- 
quate quality control which 
failed to detect the corroded 
disc, and a test set-up which 
aimed the disc end of the 
bottle toward technicians. 

Inadequate work control in 
that cryogenic vent lines 
were not properly cleaned 
after trimming as required. 
Contributing was QC failure 
to detect the contaminated 
parts. 


ro 
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Recommended 
Preventive/Corrective 
___ Action 


Ensure periodic inspection 
and certification of all 
cryogenic sample bottles. 
Ensure that test equipment 
configurations provide 
adequate protection to 
personnel from hazards of 
pressurized sample bottles. 


Ensure that personnel are 
trained and certified for 
their job. Require strict 
QC during each step of the 
cryogenic system assembly 
and installation. 


SECTION II 
ELECTRICAL SYSTEMS 


Ac c i dent/Inc ldent 
Description 

52. During operational test- 
ing and checkout of a 
spacecraft vacuum pump 
electrical unit, 23 volt 
circuitry was subjected 
to 115 volt main supply 
due to cross connections 
and sustained irreparable 
damage to several circuit 
components. 

53. While a set of nickle- 
cadmium batteries was 
undergoing trickle 
charge in the course of 

a charge-discharge cycle, 
one of the cells shorted, 
overheated and caught 
fire. 


Causes 

Inadequate quality control 
during manufacture of the 
unit in that the wiring 
harness of the unit had 
been erroneously assembled 
and permitted 115 volts 
supply to flow into circuits 
designed to accept only 
28 volts. 


Deficient battery condition- 
ing procedures in that the 
charge -discharge cycles 
used were too severe for the 
batteries being employed. 


Recommended 

Preventive/Corrective 

Action 


Require development and 
use of circuits continuity 
checkout procedures for 
post-assembly verification 
of electrical units. 

Ensure that such procedures 
receive review and con- 
currence by competent 
engineering authority. 


Designate battery condition 
ing operations as hazardous 
Require safety review/ 
analysis of conditioning 
procedures to ensure pro- 
cedures compatibility with 
the batteries being process 
ed. 


ro 



SECTION II 
ELECTRICAL SYSTEMS 


Accident/Incident 

Description 


During a training 
flight, a space flight 
training vehicle lost 
its primary electrical 
system and crashed 
when the attitude control 
system (ACS) failed. 

The vehicle was destroy- 
ed and the pilot receiv- 
ed minor injuries 
during ejection. 


While performing PM on 
an electric main breaker 
panel, a workman using a 
wire brush to clean inside 
the panel made contact 
with energized stabs, 
receiving second and third 
degree burns. 


Causes 

A design deficiency in that 
the ACS could not be switched 
from primary to emergency 
electrical power with the 
engine at flight RPM. Con- 
tributing causes were in- 
adequate check-ou't' pro- 
cedures which failed to 
verify emergency switchover 
functions at engine flight 
RPM, and the need for multiple 
relays to operate simultaneous- 
ly to switch in emergency ACS. 

Failure to follow required 
procedures in that the panel 
was not de-energized prior to 
beginning maintenance opera- 
tions. Contributing Was the 
use of improper equipment; 
wire brushes were prohibited 
for cleaning electrical 
system components. Also, 
inadequate training in that 
the workman incorrectly used 
a test instrument to verify 
the panel was de-energized. 


Recommended 

Preventive/Corrective 

Action 


During design of complex 
flight systems ensure 
that hazard analyses are 
performed on all electrical 
circuits controlling switch 
over from one system to 
another to determine integrity 
of relays under all power 
settings. Require all flight 
control systems to be tested 
and certified for actual 
flight conditions. 


Ensure positive verification 
of circuit deactivation prior 
to allowing electrical work. 
Ensure that all tools used with 
electrical consoles are non- 
conductive or are specifically 
certified for use. Require 
training of all personnel as- 
signed to work on electrical 
systems. 


SECTION II 
ELECTRICAL SYSTEMS 


Accident/Incident 

Description 


Causes 


56 . During a manufacturing 
checkout of a spacecraft 
module caution-and-warn- 
ing system power supply 
unit, a signal input 
lead was disconnected 
from the test oscillo- 
scope, as part of the 
test sequence, and was 
accidentally grounded, 
causing an arc and burn- 
ing the C&W power supply. 


57. During assembly elec- 
trical insulation 
resistance test of 
cables installed on a 
flight unit, a power 
supply and two control 
accelerometers were 
severly damaged due to 
the application of 
reverse polarity. 


Test set-up design de- 
ficiency in that the test 
lead between the oscilloscope 
and the power supply unit 
contained no over-current 
protective devices. Contrib- 
uting was personnel error in 
that the oscilloscope was 
connected with its chassis 
ungrounded and electrically 
"hot"; and procedural de- 
ficiency since no detailed 
circuit hook up instructions 
were provided the technicians 
performing the work. 

Inadequate procedures in that 
the inspection verification of 
the set-up configuration prior 
to test was incomplete. Con- 
tributing was human error in 
misreading test set-up engineer 
lng drawings during test set- 
up. 


Recommended 

Preventive/Corrective 

Action 


Require that circuit-pro- 
tective current -limiting de- 
vices be installed in test 
leads used on spacecraft 
electrical systems. Ensure 
that technicians used to 
test flight systems are 
trained and certified for 
the work. Require the use 
of formal procedures and 
checklists with QC verifica- 
tion in making test set-ups. 


Require formal QC inspection 
verification of test 
configurations prior to 
initiating test of critical 
components. ' 
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SECTION II 
ELECTRICAL SYSTEMS 


Accident/incident 

Description 


58 . During assembly cell- 
matching sequence test 
on a number of flight 
batteries, a battery 
cell explosion occurred, 
due to excessive internal 
pressure generated by 
major cell overcharge/ 
over-temperature, result- 
ing in minor damage to 
test equipment and the 
test facility, and des- 
truction of the battery. 


59. During battery charging 
in a launch operations 
battery shop, a battery 
cell overheated and 
ruptured destroying the 
battery. 

60, During manufacturing 
assembly of an electrical 
wiring harness for a 
spacecraft, the harness 
cover pressed a deep 
Indentation into a wire 
bundle cover, necessitat- 
ing replacement of the 
bundle cover. 


Causes 

Deficient test assembly 
procedures in that verifica- 
tion of the proper test 
set-up was not made prior 
to test initiation. An 
installation error in 
assembling the test set-up 
was made which inhibited 
automatic test shut down 
when battery over-tempera- 
ture was encountered. Con- 
tributing cause was failure 
to communicate test informa- 
tion (over- temperature 
conditions) during shift 
change. 

Inadequate inspection pro- 
cedures In that a weak 
cell had gone undetected, and 
It overheated at standard 
charge rate. 


Inadequate work control in 
that there was Improper 
storage of wire harness when 
the harness cover was install- 
ed. 


Recommended 

Preventive/Corrective 

Action 


Require QC Inspection 
and verification of proper 
test configuration prior to 
initiation of cell sequenc- 
ing tests. Establish pro- 
cedures/checklists for transfer 
of essential test information 
at shift changes. 


Require inspection and 
test of battery cells for 
cell condition before 
starting charging cycle. 


Ensure that procedures 
for electrical harness 
cable assembly include 
a cautionary note to 
verify proper storage of 
wire harness before 
installing cover. 
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SECTION II 
ELECTRICAL' SYSTEMS 


Ac c i dent/Inc i dent 
Description 

6l. During nickle cadmium 
battery conditioning 
at a test facility, a 
cell overheated re- 
sulting in emission 
of smoke and fumes and 
necessitating area 
evacuation. The battery 
had to be replaced. 


62. During manufacturing 
checkout of an 0 PL 
burner sparks ^ 
system, a short 
occurred on one burner 
spark circuit, result- 
ing in excessive 
current to the circuit 
and burnout of the 
spark exciter and 
ancillary circuitry. 


Causes 


Material failure in that 
the battery failed internal- 
ly while under normal 
charge conditions. 


Personnel error in that 
the connector to the spark 
exciter had been assembled 
with a misaligned pin, 
which shoi’ted to the connect- 
or shell; and inadequate 
monitoring o*' meter panels 
in the test control center 
during the trial run. 


Recommended 

Preventive/Corrective 

Action 


Designate battery 
conditioning areas and 
operations as hazardous 
and ensure that all area 
personnel are instructed 
in emergency evacuation 
procedures. 


Require QC certification 
after assembly or installa- 
tion of electrical com- 
ponents or flight hardware 
circuitry. Establish 
procedi-res for megger- pre- 
testing high voltage circuit 
sections for potential 
grounding. Assure that 
control center monitoring 
procedures during test 
runs are adequate. 

Where possible, equip 
safety critical or operational- 
ly critical meters with 
overcurrent alarms. 
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SECTION II 
ELECTRICAL SYSTEMS 


Accident/incident 

Description 


During manufacturing 
assembly of a space- 
craft, an engine 
glmbal electrical switch 
toggle was broken off 
its panel due to an 
unknown impact. 

During certification 
testing of a power 
supply unit, the unit 
and a launch vehicle 
data adapter being 
used in the test were 
damaged due to an 
electrical far-. It . 


During acceptance test- 
ing of a command de- 
coder unit, the unit 
was damaged when it 
was electrically shorted 
between terminals of a 
digital voltmeter being 
used to conduct the 
test . 


Causes 

Inadequate assembly pro- 
cedures in that protective 
covers for the switch 
toggles were not provided. 


Failure to follow required 
procedures in that test 
set-up cables were modified 
to accommodate test conditions 
without engineering appro val 
and without inspection, re- 
sulting in misconnection of 
test power. 


Inadequate test procedures 
in that the shorting link 
between the voltmeter ter- 
minals was not removed prior 
to proceeding with the test. 


Recommended 

Preventive/Corrective 

Action 


Require use of protective 
covers/caps for flight 
electrical equipment 
during assembly to avoid 
inadvertent damage. 


Require that all modifica- 
tions of test set-up 
configurations and test 
procedures which involve 
critical hardware be approved 
by competent engineering 
authority. Require QC in- 
spection of approved test 
equipment changes prior to 
testing. 


Require formal procedures 
and checklists to verify 
proper test set-up conditions 
prior to beginning test. 
Conduct hazard analyses of 
test procedures to identify 
and prevent potentially 
hazardous events. 


SECTION II 
•ELECTRICAL SYSTEMS 


Accident/Incident 

Description 

During vibration test- 
ing of a launch vehicle 
digital computer (LVDC), 
the LVDC was excessively 
vibrated due to incorrect 
mounting location of a 
test control accelero- 
meter, resulting in 
damage to the LVDC. 


While spacecraft systems 
were being tested in an 
assembly and checkout 
facility, output voltage 
on the 2 & VDC test power 
supply rose to approximate- 
ly 50 ’/DC, subjecting 
the spacecraft MN bus A 
and E to a voltage level 
of approximately 45 VDC 
for 4-3 seconds. 


Causes 

Deficient design of test 
set-up in that the mounting 
location of the control 
accelerometer on the test 
fixture was not identified 
with any markings or refer- 
ence designation, and there 
was an additional unmarked 
and unused mounting hole on 
the fixture. 

Random material failure, 
since a transistor in the 
power supply regulator 
circuitry failed. Contribut- 
ing was the lack of over- 
voltage sensing and protecting 
circuitry which would shut 
down the power supply in the 
event of an over-voltage 
condition. 


Recommended 

Preventive/Corrective 

Action 


Designate vibration test- 
ing of flight equipment 
as safety critical. Ensure 
that set-up drawings pro- 
vide positive Identification 
of mounting location of test 
hardware. Require QC 
Inspection and approval of 
test configurations prior 
to test. 

Provide over-voltage 
sensors in electrical test 
set-ups which will cause 
the output of the power 
supply to be interrupted 
if the output voltage 
reaches established limits 
at any time. 



Accident/Incident 

Description 


A technician crawled 
under a cathode ray 
tube unit at a test 
facility to perform 
routine adjustments 
with the power on 
and his shoulder 
came into contact 
with a 14 KV terminal 
and received an 
electrical shock. 

During work on a 28V 
power supply a 
technician's metal 
watch bank shorted 
out against an electri- 
cal terminal and 
burned his wrist. 


SECTION II 
ELECTRICAL SYSTEMS 


Causes 


Personnel error in not shut- 
ing off power prior to work. 
Contributing were lack of 
procedures for specifying 
conditions for work perfor- 
mance and a design deficien- 
cy in that adjustment 
controls were not easily 
accessible. 


Personnel error in wearing 
a metal watch band while 
working on an energized 
circuit. 


Recommended 

Preventive/Corrective 

Action 


Ensure that for all high 
capacity electrical units, 
procedures are established 
specifying safety require- 
ments for maintenance and 
operation. Ensure that 
adjustment controls are 
placed in accessible locations 


Ensure that personnel 
working on energized 
circuits do not wear 
metal watch bands, brace- 
lets or other objects which 
can inadvertently come into 
contact with power sources. 
Ensure that hazards and 
safety precautions in 
working on energized cir- 
cuits are adequately 
covered in training courses. 
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SECTION II 
ELECTRICAL SYSTEMS 


Accident/incident 

Description 

70. While doing work in an 

ordnance storage facility 
a workman plugged a 
portable power saw into 
an extension cord and 
received minor electrical 
burns when severe arcing 
occurred. 


71. During test operations 
at a test facility a 
power supply panel 
being inserted into a 
panel rack on a test 
set contacted a 1 1C VAC 
circuit breaker terminal 
in an adjacent panel 
and sustained minor arc 
damage. Circuit breaker 
action prevented major 
damage . 


Causes 


Personnel error in that the 
workman failed to inspect and 
maintain his equipment proper- 
ly, since a set screw was 
missing from the male plug, 
causing a short circuit and 
arcing. 


Improper handling in which 
the technicians allowed 
the panel to tip out of 
position. Contributing 
was procedural in t-ha^ rack 
power was not switched off 
prior to initiation of 
installation work. 


Recommended 

Preventive/Corrective 

Action 


Ensure that procedures provide 
for Inspection of electrical 
plugs and connections prior 
to issue and use of electrical 
hand tools. Require safety 
certification of electrical 
hand tools to be used in ord- 
nance and flammable material 
storage areas. 


Ensure that electronic 
technicians are trained 
in proper equipment handling 
procedures and certified 
for their Job. Ensure that 
work procedures specify 
turning off rack electrical 
power prior to inserting 
additional units in panel 
racks. 
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SECTION II 
ELECTRICAL SYSTEMS 


Accident/incident 

Description 


72. During an electrical 
"trouble" test in a 
test support facility, 
a technician received 
electrical bums on 
both hands while 
handling a 480V, 3 
phase cable and 
receptacle. 

73. During routine on- 
site maintenance a 
technician was blow- 
ing corrosion from 
the top of a bank of 
electrical storage 
batteries with an 
air hose when the air 
stream entered a 
battery wall via 

a vent and blew 
caustic alkaline so- 
lution into his eyes. 


Causes 

Material failure in that 
the receptacle had an 
electrical short. 


Inadequate maintenace pro- 
cedures. The technician had 
to use unregulated air of 
60 psi which created suffi- 
cient internal pressure in 
the battery to spray the 
solution out. Contributing 
was personnel error in that 
the technician was not 
wearing eye protection 
equipment . 


Recommended 

Preventive/Corrective 

Action 


Require low voltage 
continuity check of high 
voltage cables/receptacles 
prior to applying load 
during maintenance or 
"trouble" testing. 


Forbid the use of 
air over 15 psi pressure 
for battery corrosion clean- 
ing. Supply pressure 
regulators for all air 
hoses used in battery 
maintenance operations. 
Ensure that eye protection 
equipment 3 s available 
and its use enforced at 
field sites as well as In 
shops. 


oo 

o 


* 


SECTION II 
ELECTRICAL SYSTEMS 


Accident/Incident 

Description 

74. Seventeen of 27 nickel- 
cadmium batteries in 
an unattended emergency 
lighting cabinet in a 
facility mechanical 
equipment room were 
ruptured, due to in- 
ternal overpressure 
or externally ignit- 
ed hydrogen explosion, 
resulting in blowing 
the door off the 
cabinet and strewing 
pieces of plastic cell 
case over the facility 
floor. It was evident 
that an explosion of 
considerable magnitude 
had occurred without 
smoke or soot deposits. 


Causes 


The exact cause of the 
explosion is unknown. 
Probable cause was in- 
adequate maintenance pro- 
cedures/techniques which 
allowed a contaminated 
electrolyte chemical 
reaction to plug battery 
vent caps, permitting a 
hydrogen pressure build- 
up. Another possible 
cause was deficient op- 
erating procedures which 
failed to recognize the 
possibility of an 
accumulation of hydrogen 
gas in a confined area 
which could be Ignited 
by a spark. 


Recommended 

Preventive/Corrective 

Action 


Ensure that facility 
maintenance personnel are 
Instructed in the procedures/ 
techniques necessary to 
prevent contamination of 
battery electrolyte in 
emergency lighting systems. 
Require inspection of 
battery vent caps for 
plugging at each service 
Interval. Require positive 
circulation of ambient air 
around battery areas In 
facility emergency 
lighting systems. 



Accident/Incident 

Description 


In a test laboratory, 
the wet cell battery 
of a wall mounted 
emergency light ex- 
ploded, sending a 
spray of acid into a 
hallway, which at the 
time contained no 
people. No Injuries. 

During normal opera- 
tions of an environment- 
al simulation laboratory, 
outdoor switchgear 
circuits triggered an 
explosion In their en- 
closure, resulting in 
extensive damage to the 
switch gear, transformer 
and electrical cables. 


SECTION II 
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Causes 


Maintenance had inadvertently 
replaced vented battery caps 
with a non-vented type. During 
automatic "trickle charge" the 
battery could not vent the 
hydrogen produced and exploded. 


Defective electrical cables 
provided an ignition source 
and triggered explosion of 
unexplained accumulation of 
gas in the area. Contribut- 
ing was inadequate inspection 
of electric cables and lack 
of a hazard analysis to 
determine potential gas 
accumulation In the system. 


Recommended 

Preventive/Corrective 

Action 


Ensure that maintenance 
procedures for wet cell 
batteries preclude in- 
advertent substitution of 
non-vented caps. Ensure 
that personnel handling 
servicing and maintenance 
of wet cell batteries are 
trained. 

Ensure that a hazard analysis 
Is performed on any enclosed 
electrical control system 
for the possibility of gas 
accumulations. Establish 
preventive maintenance and 
inspection procedures for 
checking condition of 
electrical power cables In 
switch gear installations. 


SECTION II 
ELECTRICAL SYSTEMS 


Ac c i dent/lnc i dent 
Description 

77. During operation of 
an electric bridge 
crane at a vehicle 
stage manufacturing 
facility, an electrical 
fire occurred at the 
plug-in unit serving 
the crane causing 
minor damage to the 
unit. 


78. During routine mainten- 
ance in a test laboratory, 
a technician attempted to 
close a circuit breaker, 
the "bat” uandle of 
which had broken off, 
by inserting the tip of 
a ball point pen into a 
hole in the remaining 
portion of handle for le- 
verage. When the circuit 
breaker closed, a flash 
occurred and the ball 
point pen disintegrated. 


Causes 

Malfunction. Inadequate 
contact of spring loaded 
plug pins wl^h plug-in unit 
bus bar caused over-heating 
and fire. Pour over-current 
protective devices failed 
to operate. Contributing 
were maintenance policies 
which did not call for 
periodic inspection/adjust- 
ment of contact mechanisms 
or over-current protective 
devices. 


Recommended 
Preventive/Corrective 
Action 

Establish maintenance and 
calibrat ion/inspection 
schedules for electrical 
plug-in units and over- 
current protective devices 
used on equipment handling 
end item hardware. Ensure 
that maintenance schedules 
require checking the 
adjustment of electrical 
contact points and the time 
current characteristics 
of over-current protective 
devices. 


Inadequate laboratory 
operation/maintenance pro- 
cedures in that the defective 
switch handle had not been 
"red-tagged" to prevent 
operation. Contributing was 
personnel error in that the 
technician attempted to 
manipulate defective electrical 
hardware . 


Ensure that laboratory 
operating/maintenance pro- 
cedures provide for timely 
"red-tagging" and reporting 
of defective laboratory 
electrical equipment, and pro- 
hibit use/operatlon of such 
hardware until repair is made. 
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SECTION II 
ELECTRICAL SYSTEMS 


Accident/Incident 

Description 

79. During routine facility 
maintenance of an auto- 
matic charger battery 
system, 6 of 27 nickel- 
cadmium batteries being 
reinstalled exploded, 
resulting in mild 
chemical burns to two 
workmen. 


Causes 

Inadequate work procedures 
in that a probable cause was 
ignition of accumulated 
hydrogen gas by a spark 
generated during the re- 
placement work, and inadequate 
ventilation of the battery 
area; a second probable 
cause was stopped up vent 
caps, resulting from 
contaminated electrolyte, 
which permitted hydrogen 
pressure build-up to an 
explosive force in the 6 
batteries. 


Recommended 

Preventive/Corrective 

Action 


Require positive circula- 
tion of ambient air around 
battery areas during 
maintenance/servicing of 
batteries. Require 
verification of battery 
vent cap openings prior 
to initiating maintenance/ 
servicing in battery areas. 
Ensure that maintenance 
personnel are adequately 
instructed in the procedures 
necessary to prevent con- 
tamination of battery electro- 
lyte. 


SECTION III 
FACILITY/GSE SYSTEMS 


Accident/Incident 

Description 

95. During inspection of 
facilities' fire de- 
tection systems at a 
NASA center, several 
"fixed temperature/ 
rate of rise" fire 
detectors were found de- 
fective in the "rate 

of rise" mode. 

96. During welding opera- 
tions of a launch 
facility structure on 
the upper level, slag 
fell to a lower level, 
striking a workman. 

No injury resulted, 
although the potential 
for such was present. 


Causes 

Material failure because a 
crack or other defect in 
the detector pressure tight 
dome prevents necessary 
pressure build-up from heat 
exposure which activates tht 
alarm. 


Failure to exercise 
reasonable safety precautions, 
in that protective devices 
were not used. 


Recommended 
Pre vent i ve/Corre ct i ve 
Action 


Establish periodic 'Inspection 
and replacement" schedules 
for automatic fire detection 
equipment at all facilities. 


Designate all welding 
operations on launch facility 
structure as hazardous 
and require safety inspec- 
tion prior to commencing 
operations. Enforce use 
of protective measures to 
control sparks, spatter, 
and dripping slag during 
welding operations. 
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Accident/incident 

Description 

While undergoing con- 
tingency crew fire train- 
ing under live fire 
conditions, 3 men re- 
ceived minor injuries 
when the portable 
extinguishers used 
malfunctioned and 
the trainees panicked 
and ran from the train- 
ing area. 


During heat curing of 
materials in a 500° F. 
rated environmental 
chamber, the materials 
were decomposed and the 
chamber damaged due to 
an excessive rise (to 
approximately 1000° F.) 
in chamber temperature. 


SECTION III 
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Causes 


Failure to properly in- 
spect and maintain ex- 
tinguishers, since 
chemicals had formed and 
lodged in discharge hose, 
making extinguishers in- 
operative. Contributing 
were failure to familiar- 
ize trainees with escape 
routes prior to beginning 
operations and the use 
of a fire much larger 
than needed on a windy 
day. 

Failure to follow approved 
procedures in that the 
temperature sensing and con- 
trol system was improperly 
set when the chamber was 
readied for operations. 
Contributing were a material 
failure and a design de- 
ficiency; a chamber pressure 
bleed line had failed and 
the chamber temperature 
control system was so de- 
signed that it was dependent 
on proper operation of the 
chamber pressure system to 
provide over-temperature 
shutdown. 


Recommended 

Preventive/Corrective 

Action 


Require formal procedures, 
for cleaning, inspection and 
maintenance of extinguishers, 
including inspection for 
blocked discharge hoses. 
Require "dry-run" of trainees 
prior to exposure to 
simulated fire fighting 
conditions. Ensure that 
wind factors are considered 
when determining size of 
training fire to be used. 


Require the use of formal 
procedures and checkists 
in preparing test chambers 
for operation. Ensure that 
test chamber temperature 
sensing and control systems 
are independent of the 
proper operation of other 
systems, or provide fail- 
safe features. 


SECTION III 
FACILITY/GSE SYSTEMS 


Ac c i dent/Inc i dent 
Description 

99. Approximately ten 

minutes after a weld- 
ing crew at a test 
site construction 
operation had quit 
work for the day, a 
fire occurred as a 
result of hot slag 
wedged between a 
scaffold board and 
tarpaulin wind break. 

100. During Inspection and 
recovery of a sample 
in an X-ray spectro- 
meter, a trained and 
qualified technician 
bypassed the safety 
interlocks and removed 
a shield to recover 
a spilled sample and 
was exposed to X-ray 
radiation. 


Causes 

Inadequate work control 
procedures in that an 
asbestos fire blanket 
was not in place during 
the welding operations. 
Contributing was failure 
to inspect work area 
prior to leaving. 


Failure to follow establish- 
ed procedures for handling 
samples in the spectrometer. 
Contributing were a design 
deficiency in that the 
spectrometer lacked adequate 
positive safety interlocks to 
ensure de-activation of the 
x-ray high voltage power 
source when the shield was 
removed, and a lack of 
hazardous condition warning 
devices. 


Recommended 

Preventive/Corrective 

Action 


Ensure that work control 
procedures enforce use 
of barriers/asbestos 
blankets during welding 
operations; require at 
least a one hour fire 
watch following end of 
welding operations. 


Require that all x-ray 
spectrometry be designated 
as hazardous. Provide 
safety interlocks that will 
turn off the x-ray power 
supply when the shield is re=- 
moved. Ensure that all areas 
where x-ray equipment Is being 
used are designated and 
placarded as hazardous. 
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FACILITY/GSE SYSTEMS 


Accident/incident 

Description 

While cutting a steel 
plate near an unused 
LNptank, during manu- 
facturing operations, 
sparks from the cutting 
torch fell on the tank 
insulation causing it 
to ignite and resulting 
in a small fire. 

During the proof load- 
testing of a manu- 
facturer's 10 ton bridge 
crane, a control panel 
door loosened and 
fell 40 ft. to the 
floor. 


While moving a work- 
stand being used during 
the assembly. and checkout 
of a flight module, a 
handrail struck an 
antenna guard cover on an 
adjacent module causing 
minor damage to the cover. 


Causes 

Inadequate work control 
and failure to follow 
established procedures and 
safety precautions, in that 
operation was started with- 
out required approval of 
supervision and fire de- 
partment verification. 


Inadequate inspection/ 
maintenance procedures in 
that the holes for #4 
counter sunk screws had 
enlarged and could no 
longer hold the door 
hinge in place. 


Inadequate work control 
which permitted moving 
the work stand without 
assistance and assurance 
that. proper clearance from 
flight hardware articles 
could be maintained. 


Recommended 

Preventive/Corrective 

Action 


Designate all welding 
operations around LN tanks 
as hazardous. Require 
safety/fire department 
inspection and verification 
before welding starts. 
Require use of protective 
shields or blanketing. 


Require maintenance in- 
spection of counter. sunk 
screws and screw holes 
for looseness or wear on 
overhead handling equipment 
being used with critical pro- 
gram hardware. Where possible, 
replace screws with bolts 
and lock nuts. 

Require the use of at 
least one observer to 
verify clearances during 
movement of work stands 
In program manufacturing/ 
assembly areas. 
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SECTION III 
FACILITY/OSE SYSTEMS 


Accident/Incident 

Description 

104. During manufacturing 
welding operations on 
an engine instrumenta- 
tion line, a high 
frequency arc punched 
through the insulation 
of the welding head 
cable and burned a 
hole approximately 
3/16 Inch In diameter 
in the engine cross- 
over duct bellows. 


105. During maintenance of 
a space engine manu- 
facturing facility 
air conditioning unit, 
a solenoid valve blew 
up while being sweated 
off a unit freon line, 
causing minor Injury to 
two workmen. 


Causes 

Inadequate pre-welding 
inspection procedures, since 
inspection of the failed 
cable suggests several 
strands were cut or broken 
prior to Initiation -of the 
arc. Contributing was 
personnel failure to main- 
tain required cable 
clearances from conductive 
surfaces. 


Personnel error. The freon 
line had not been cut, as 
required, to relieve gas 
pressure prior to applying 
heat. 


Recommended 
Pre ven t i ve/Corr e c 1 1 ve 
Action 

Require pre-welding QC 
inspection and certification 
of electric arc welding 
cables prior to use on 
program essential equipment. 
Inspect for unacceptable 
insulation cuts, knicks and 
abrasions; prevent welding 
cables from touching 
conductive surfaces during 
welding. Ensure that 
welding personnel are 
trained and certified for 
safe conduct of the work. 

Designate all welding, 
torch cutting and heat 
sweating operations on 
essential facility air- 
conditioning or refrigerat- 
ing equipment as ha- 
zardous and require training 
and certification of workmen 
for their job. Require use 
of checklist procedures 
when such work is performed in 
vicinity of flight hardware. 
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Accident/Incident 

Description 

During a manufacturing 
functional check of the 
ladder/catwalk assembly 
for horizontal tank 
interior operations, the 
winch which deploys and 
stows the assembly failed, 
allowing the assembly to 
drop uncontrollably to 
its deployed position. 
Damage consisted of 
broken cables and fittings 
on the assembly. There 
were no injuries. 

While a spacecraft was 
mounted on a work stand 
during parts installation 
a VHP in-flight antenna 
was damaged in an unknown 
manner several hours 
after having been in- 
stalled. 
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Causes 


Inadequate tool inspection/ 
maintenance procedures in 
that the manually operated 
winch, which had a mal- 
functioning safety lock and 
a loose drive handle, had not 
teen removed from service. 
Contributing was inadequate 
work procedures which allowed 
use of defective equipment. 


Inadequate work control in 
that there was failure to use 
available antenna protective 
devices. 


Recommended 
Prevent ive/Corrective 
Action 


Require periodic (at least 
monthly) maintenance 
inspection of handling gear 
in manufacturing/assembly 
areas. Ensure that manu- 
facturing/assembly area 
operating procedures re- 
quire "red- tagging" of 
deficient handling gear, 
and removal from service 
until repair is made. 


Ensure that area work 
procedures require in- 
stallation of flight 
hardware protective devices 
during assembly operations, 
when they will not interfere 
with current work. Require 
formal QC inspection and 
verification of their 
Installation. 
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Accident/Incident 


Description 


Causes 


108. During first stage engine Inadequate work control in 
boost test of a space- assembly of the te 3 t set-up 

craft test article, the in that the failed bolt had 

vehicle was damaged due been overstressed In a 
to failure of a bolt in previous unrelated test and 

a load adapter. Failure was Incorrect size for the 

occurred at approximately boost test. 

139 # of a scheduled 
maximum load of 14056. 


109. During preparations to Failure to instruct mainten- 

introduce a powdered ance crews about the combus- 

chlorine compound (HTH) tion and toxicity hazards of 

Into drinking fountain HTH. The crew used a plastic 

drains, in an assembly and bottle apparently contaminated 
checkout facility, the with some foreign material 

compound ignited, re- that Ignited on contact with 

leasing dense clouds of the HTH. 
chlorine gas. until 
extinguished with 
a CO 2 fire extinguisher. 

Personnel were evacuated 
with no injuries. 


Recommended 
Preventive/Corrective 
Action 

Establish supervlsory/QC 
controls to prohibit 
reuse of test set-up 
hardware unacceptably 
damaged or overstressed 
during previous tests. 

Require QC inspection and 
buy-off of test set-up 
assemblies for conformance 
to test set-up drawings 
prior to initiation of 
test on program essential 
equipment. 

Ensure that all maintenance 
personnel are informed of the 
hazards and precautions In 
using HTH. Require hazard 
warnings on HTH containers. 
Require that containers 
used with HTH are washed 
Immediately prior to use. 




SECTION III 
FACILITY/GSE SYSTEMS 


110 . 


111 . 


Accident/Incident 

Description 

When the doors on a 
flight vehicle assembly 
building were closed, 
three float scaffolds 
erected earlier were 
caught in the path 
of the closing doors 
and destroyed. 


Causes 

Personnel error In that 
verification of adequate 
door clearances was not 
made before closing. Con- 
tributing was failure by 
riggers to place required 
flags or signs to warn that 
scaffolds protruded into 
the door's path. 


Recommended 

Preventive/Corrective 

Action 


Ensure that obstructions near 
sliding doors have warning 
flags or signs when they 
protrude into clearance ways. 


During functional test 
at a space vehicle 
assembly facility, a 
helium manifold con- 
troller was left 
inside a vacuum dry- 
ing oven over the 
weekend and was badly 
charred, requiring ex- 
tensive overhaul. 


Malfunction of the over 
power supply switch relay 
vrhich kept oven power on 
after the oven pilot switch 
was turned off. Contributing 
were inadequate power shut- 
down procedures in that the 
facility main power supply 
switch was left on, and 
inadequate maintenance pro- 
cedures in that the oven 
switch relay had a design 
life of one million cycles 
but was cycled 1.3 million 
times before it failed. 


Require that procedures 
governing oven drying 
of program critical hard- 
ware include shut down of 
facility main power supply 
circuit as well as unit 
power switch at end of 
daily operations. Ensure 
that maintenance schedules 
which specify replacement 
of parts before end of 
design life are prepared 
and followed for all equipment 
which handles program 
critical hardware. 
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Ac c i dent/lnc i dent 
Description 

112. During preparation of 
a pneumatic test 
chamber for a high 
pressure impact test 
at 9500 psig the 
sequencing valve was 
being cycled wheft an 
explosion and GOX 
fire occurred, des- 
troying miscellaneous 
chamber equipment. 

There were no personnel 
injuries. 

113. During test of a flight 
experiment package in a 
thermal vacuum chamber, 
the package and associat- 
ed equipment were severly 
damaged by internal high 
voltage corona discharges 
which occurred when a 
chamber vacuum pump seal 
failed and allowed chamber 
rep re s suri z at i on . 
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Causes 


Material incompatibility 
in that the non-metallic 
material (Vespel 21) used 
for a valve seat reacted 
with the high pressure 
oxygen to cause the explo- 
sion. 


Deficient test procedures in 
that the adequacy of the 
test setup was not verified 
prior to or during the test; 
loss of seal was caused by 
improper positioning of a 
fan used to blow air on a 
LNg trap -input solenoid 
valve to prevent ice build- 
up on the valve and sub- 
sequent loss of seal to the 
atmosphere. Contributing 
was deficient test setup 
design in that there was 
no provision for automatic 
cutoff of high voltage sources 
in event of pressure rise in 

the chamber. 


Recommended 
Prevent i ve/Corr e c t i ve 
Action 


Prohibit use of Vespel 21 
material in applications 
using high pressure oxygen. 
Require safety review/ 
analysis of oxygen system/ 
component designs and 
specifications during their 
development to eliminate 
materials incompatibility. 


Require use of formal pro- 
cedures and checklists to 
obtain and verify proper con- 
figuration of test setup in 
test chambers; include 
periodic inspection of test 
system elements for proper 
operation during the test 
run. When conducting vacuum 
tests on a specimen having 
a high voltage source that is 
likely to arc in the corona 
pressure range, require in- 
stallation of an automatic 
power interrupter to shut 
off the high voltage source 
on significant rise in 
chamber pressure. 
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114 . 


115 . 


Accident/Incident 

Description 


Causes 


Recommended 

Preventive/Corrective 

Action 


During manuf acturlng 
assembly of a space- 
craft module a drain 
bucket used to bleed 
a water glycol trim unit 
was entangled with an 
Intercom extension cord 
in the module and tipped 
over, spilling water-glycol 
solution. There was 
no damage but the incident 
could have caused module 
contamination. 


Inadequate work control in 
that the unattended drain 
bucket had not been secured, 
and area housekeeping was 
marginal. 


While cutting a 
structural member on a 
launch support facility, 
molten slag fell on flight 
equipment and lines at 
lower level damaging fluid 
lines and burning electrical 
cables. Subsequent investiga- 
tion showed that the torch 
was being used only 3 
Inches from unprotected 
fuel lines and a 3000 psi 
helium supply line. There 
were no injuries. 


Inadequate work control in 
that welding operations were 
being performed without pro- 
viding protective shields, 
covers, or blankets. 


Implement and maintain 
rigid housekeeping controls 
in flight system assembly 
areas. Require periodic 
QC inspection during each 
shift.. Prohibit unattended 
liquid containers in work 
areas unless secured from 
inadvertent spill by a 
holding fixture. 


Designate all welding 
operations around flight 
hardware as safety critical. 
Require inspection and 
safety approval prior to 
welding operations. Require 
protective blankets or 
covers to prevent damage 
from falling welding slag. 
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116. 


117 . 


Ac c ident/lnc ident 
Description 

While lowering an 
engine service platform 
at a launch vehicle 
assembly station with 
four hand-operated 
winches, one of the 
winches' failed at the 
cable drum swage con- 
nection, allowing one 
side of the platform 
to fall, striking and 
slightly damaging 
one engine. 


While moving an engine 
vertical installer from 
the first level of a test- 
stand at a test facility, 
the left and right hori- 
zontal adjustment hand 
wheel struck, the concrete 
structure of the stand, 
resulting in breaking of 
2 spokes at hub with an 
additional check of one 
spoke at the outer ring. 


Causes 

Inadequate work control in 
that the failed winch was 
positioned so that only 3 
cable turns remained on 
the drum at the time of 
failure; and the lowering 
method used could allow 
uneven distribution of the 
load (overload). Contribu- 
ting was operator error 
in not requiring a halt in 
operations as the cable 
was paid out to the 3 
turn condition. 


Inadequate work procedure 
since there was a lack of 
attention given to the 
clearance needed between the 
Installer and the test stand 
as the move was being made. 


Recommended 

Preventive/Corrective 

Action 


Ensure that winches are so 
positioned In work areas 
that at least 3 cable 
turns will remain on the 
winch drum at maximum 
cable extension. Where pos- 
sible avoid use of inde- 
pendently operated winches 
on the same load; use ad- 
justable single point pick- 
up tool to avoid uneven 
distribution. Ensure that 
handling personnel are in- 
structed and certified for 
safe use of hoisting equip- 
ment. 

Require the use of at 
least one observer during 
movement of heavy equipment 
in test areas. Ensure 
that operators are properly 
certified for duties 
being performed. 
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Accident/incident 

Description 

During lowering of an 
electrical cable by a 
mechanic from an upper 
level of a mobile 
service structure to 
pad level, a cable coil 
lying on the deck caught 
his foot, jamming hi 3 
leg against the railing, 
resulting in minor injury. 

During high winds, (tornado 
action) two trailers in a 
launch pad area were over- 
turned and destroyed. There 
were no Injuries. 

While checking inopera- 
tive elevator door 3 in 
a launch facility stric- 
ture, a workman's finger 
was. caught between the 
linkage and hangers when 
the elevator was activated. 
The finger was severely 
lacerated. 


Causes 

Failure to exercise reason- 
able safety precautions in 
that the heavy cable was not 
properly secured to help 
control the lowering opera- 
tions. Contributing was 
failure to provide sufficient 
personnel to safely lower 
the cable. 


Environmental, trailers were 
tom loose from tie downs by 
tornado action winds. 


Inadequate work control in 
that the doors were being 
checked with the elevator 
power on. 
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Recommended 

Preventive/Corrective 

Action 


Require safety securing of 
all portable equipment when 
it is being raised or 
lowered. Ensure tha; 
sufficient personnel are 
assigned to safely handle 
raising and lowering of 
portable apparatus. 


Require that safety standards 
and precautionary measures be 
established for protection of 
high value trailers in areas 
subject to high winds. 

When working on elevator 
systems ensure that the 
elevator power source is 
turned off and either 
locked out or guarded by a 
co-worker. 
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Accident/Incident 

Description 


Causes 


Recommended 

Preventive/Corrective 

Action 


Daring inspection of 
a stage pressure regula- 
tor the inspector 
dropped it and it fell 
4 feet to the floor, 
requiring component 
return to the vendor 
for reinspection and 
retest. 


Inadequate inspection pro- 
cedures in that positive 
component protection was 
not provided during inspec- 
tion. A contributing cause 
was failure to exercise 
reasonable safety precau- 
tions during component 
handling. 


Ensure that inspection 
procedures require positive 
positioning and protection 
of critical equipment during 
inspection activities. 


During Installation of 
a servoactuator on a 
spacecraft engine, a 
certified position and 
holding fixture (P&HP) 
failed, permitting the 
free end of the servo- 
actuator to rotate and 
fall 3 feet, striking 
two technicians and 
a steel work bench, 
resulting in minor in- 
juries to the technicians 
and minor damage to the 
servoactuator. 


Design deficiency in that 
the P&HP was in a failed con- 
dition prior to use but the 
design configuration did 
not permit ready inspection 
of the failed item (a shoulder 
screw); and the failed con- 
dition may have been induced 
by a standard proof load test 
(150# of safe working load). 
Contributing was poor workman- 
ship during P&HF fabrication. 


Ensure that GSE fixtures 
which handle end-item 
hardware are designed so that 
critical wear points can 
be readily inspected prior 
to use, and can be subjected 
to rigid QC inspection 
during fabrication. Require 
handling/li^ting equipment 
to be designed with a mini- 
mum safety factor of 5> 
and ensure that any components 
subject to repeated load 
stresses can be easily 
inspected for fatigue. 
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Accident/Incident 

Description 


123. A laboratory technician 
in a materials test 
facility was exposed 
to x-ray radiation due 
to failure of a safety 
device (lead shield) 
on a diffraction unit 
which became Jammed in 
the open position. 


124. During material curing 
operations at a test 
facility, a technician 
reached in the oven and 
received second degree 
burns. 1 
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Causes 


Inadequate x-ray diffrac- 
tion unit design in that the 
lead shieldwas internal to 
the unit and its open/close 
status was not sufficiently 
visible external to the unit. 
Contributing was inadequate 
procurement/receiving in- 
spection and checkout in that 
the design deficiency was not 
detected prior to or at 
the time of installation. 

Personnel error in reaching 
into hot oven. Contributing 
was failure to provide proper 
tools for reaching in the 
oven. 


1, 


Recommended 

Preventive/Corrective 

Action 


Require positive Indication/ 
warning of position status 
of shields used in x-ray 
units or systems. Require 
pre-procurement radiation 
safety review of units design 
to verify adequacy of 
controls. Require radiation 
safety inspection/checkout 
of safety controls operability 
prior to operational activa- 
tion. 

Ensure that all personnel 
working with curing chambers 
are properly trained and 
certified. Ensure that 
specific instructions are 
Issued specifying tools to 
be used and procedures to 
be followed in curing 
operations. 
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Aocident/lncident 

Description 

During test bulld-up 
in a thermochemical 
test facility, insula- 
tion on an electrical 
Immersion type heater 
caught fire due to 
failure of gaseous 
nitrogen flow over the 
heaters, and subsequent 
erroneous positioning 
of the heater control 
switch. 


During maintenance 
operations requiring 
exchange of two opera- 
tional mass spectrometers 
for malfunctioning ones 
situated on upper levels 
of a checkout facility, 
three units were placed 
into the hoisting basket 
at one time and, as one 
of the units was being 
offloaded, it swung over 
arid collided with 
another, damaging two 
gages. 


Causes 

Inadequate heating system 
design in that the heaters 
were dependent on nitrogen 
gas flow to keep them from 
overheating and there were 
no Interlocks to automatical- 
ly shut down the heaters in 
case of gas flow failure. 

Also, no heater case tempera- 
ture gages to Indicate over- 
temperature conditions; group- 
ing and labeling of heaters' 
control switches in such a 
manner that erroneous Identi- 
fication of their positions 
could be, and was, made. 

Inadequate work control 
procedures in placing more than 
one instrument at a time in a 
sling and failure to properly 
protect Instruments prior to 
movement . 


Recommended 
Preventive/Corrective 
Action 

Require positive switch 
cutouts for control of 
gas flow dependent heaters, 
to activate in event of 
low gas flow. Require 
temperature readouts for 
each heater case used in 
test systems. Require 
separate positive indicating 
off -on switches for each 
heater used in test systems. 


Require that only one 
high value/fragile test 
Instrument or similar 
hardware item be hoisted 
at a time. Require QC 
verification of proper 
hardware protection and 
padding prior to hoisting 
high value/critical program 
hardware. 
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123 . 


Accident/Incident 

Description 


Causes 


During spacecraft 
assembly testing, a 
ground- support module 
cooling unit lost its 
capability to supply 
water-glycol cooling, 
necessitating test 
shut down and a four 
hour delay in opera- 
tions. There was no 
damage to spacecraft 
component s . 

During clean room 
operations three 
technicians became 
ill from Inhalation of 
freon fumes shortly 
after turning on the 
freon cleaning unit 
master switch at the 
start of the second 
shift. They were un- 
aware that the freon 
pump switch had been 
left on by first shift 
personnel. 


Personnel error. Failure to 
follow proper maintenance 
procedures in that the cooling 
unit had been only partially 
refilled with freon during 
servicing. 


Inadequate work control 
procedures for coordinating 
Information between shift 
changes because the freon 
cleaning unit was shut down 
at the end of the first 
shift by switching the master 
switch off and leaving the 
discharge hose on the floor 
with the pump switch on; 
this condition was not 
transmitted to second shift 
personnel. Contributing was 
that the clean room had 
laminar down flow Into sub- 
flooring so that discharge 
of freon from the hose was 
not readily detectable. 


Recommended 

, Preventive/Corrective 
Action 


Require thorough post- 
servlcing/maintanance ta3t 
and functional checkotit of 
all GSE environmental 
control equipment used In 
essential operations prior 
to returning to operations. 


Require use of shift- 
change checklists in clean 
room operations to transmit 
essential Information on 
status and condition, of test 
and operating equipment. 
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Ac c i dent /Incident 
Description 


129. While the system was 
operating, the water 
separator bowl on an 
industrial air system 
facility exploded. 

There were no injuries. 

130. During flight readiness 
test of a manned system 
the launch structure was 
struck by lightning, 
causing minor damage to 
automatic checkout 
equipment. 


131. During manufacturing 

operations a non-stain- 
less steel reducer in 
a cleaning tank air line 
failed resulting in a 
30-40 gallon nitric 
acid spill. There was 
minor damage to tank 
plumbing and the 
cleaning room floor. 
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Causes 


Material failure in that 
a crack in the bowl was 
undetected and constant 
pressure caused it to 
enlarge until failure 
occurred. 

Environmental in that 
apparently the lightning 
strike traveled through 
the ground to the checkout 
equipment. There was no 
evidence of inadequate 
grounding or safety pro- 
cedures. 

Unqualified workmen erro- 
neously installed the air 
line directly into the side 
instead of over the top of 
the tank, allowing acid to 
corrode the steel reducer. 
Contributing was failure to 
inspect work for conformance 
with approved work drawings 
prior to use. 


Recommended 

Preventive/Corrective 

Action 


Ensure that inspection 
procedures provide for 
periodic checks of water 
separator bowls in industrial 
air systems. 


Require post-strike/electrical 
storm checks for damage to 
essential equipment. Ensure 
periodic inspection and 
continuity checks of the 
grounding of lightning pro- 
tection systems. 


Ensure that personnel Involved 
with Installation/maintenance 
of hazardous assemblies are 
specifically certified for 
their job. Require QC verifi- 
cation of all installation 
work involving hazardous 
materials and critical hardware. 
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Accident/incident 

Description 

132 . During pull test of an 
item of ground test 
support equipment used 
in development: testing, 
a component of the test 
article was broken due 
to excess pull force 
applied by use of a 
facility overhead crane. 
There were no personnel 
injuries. 

133. During facility modifica- 
tions, a contractor per- 
formed inspection using 

a gamma ray source without 
first securing approval 
of the radiological 
safety officer, and with- 
out instituting adequate 
area control and warning 
procedures. There were 
no accidents or incidents. 


Causes 

Inadequate/deficient test 
orocedures in that the use 
of the overhead crane was 
substituted for a malfunc- 
tioning hydroset tool 
assigned for pull test use, 
to expedite test operations. 


Management failure to 
establish and implement 
policy to include radiological 
health procedure requirements 
in facility contracts govern- 
ing radiographic inspection. 


Recommended 

Preventive/Corrective 

Action 


Prohibit use of substitute 
test tools and fixtures 
for test of essential 
equipment unless certainty 
is established that 
safe test parameters will 
not be exceeded by use 
of such substitutes. 


Require the inclusion of 
radiological safety and 
health requirements in 
safety and health clauses, 
and other pertinent 
clauses, of facility con- 
tacts where radiographic 
equipment is used. 
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Accident/Incident 


Description 


134. During post-assembly 
test of a spacecraft 
oxygen system, while 
a cap was being 
torqued on an oxygen 
simulator panel, the 
back-up wrench slipped 
off an elbow fitting 
resulting in damage 
to and replacement of 
an adjacent line. 


135. During manufacturing ' 
checkout a "Lift-A- 
Loft" being operated ad- 
jacent to a vehicle 
stage made contact with 
the stage causing two 
gouges, one 1" x 11" 
and the other approxi- 
mately 1" square and 
3/4" deep. 


Causes 

Deficient simulator panel 
design in that insufficent 
clear space was provided 
around the elbow to allow 
a secure grip with assigned 
tools. Contributing was 
personnel error in not taking 
adequate precautions to pro- 
tect adjacent hardware during 
torquing operations. 


Inadequate work control in 
that verification of clear- 
ances was not made prior to 
vehicle movement. 


Recommended 
Preventive/Corrective 
Action 

Require maintainability 
review/analysis during 
design of test equipment, 
to verify design compatibility 
with standard iools or to 
Identify special tool re- 
quirements. Ensure that 
maintenance/test personnel 
are adequately trained and 
Instructed in the pre- 
cautions necessary to protect 
essential equipment luring 
maintenance/adjustment 
operations. 

Require an observer to 
assist in verifying clear- 
ances to operator when 
using handling/lifting 
equipment around flight 
hardware. 
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Accident/Incident 

Description 

While on portable 
scaffolding in an 
assembly and checkout 
facility, a technician 
using a safety belt 
tethered to a trolley 
installed in an over- 
head channel inadvertent- 
ly-dislodged the trolley 
stop, allowing the trolley 
to fall on him, causing 
minor head injury. 


Causes 

Personnel error. The work- 
man, by repeated yanking on 
the harness, forced the 
trolley beyond the 3top. 
Contributing was design de- 
ficiency since the stop 
should have been immovable 
when struck by the trolley. 


Recommended 
Prevent i ve/Co rre c t i ve 
Action 


Ensure that the design of all 
trolley stops will prevent 
inadvertent trolley dislodge- 
ment. Ensure that workmen 
are instructed on any limit- 
ations on equipment being 
used. 


During use of a preposl- 
tioned TV set-up, a 
remotely controlled flood 
light was activated while 
lying face down and 
ignited a tar paper roof 
near the LOX pad. The 
light was disconnected and 
the fire was extinguished 
with minor damage to the 
roof. 


Inadequate work control 3ince 
the light was left connected 
to the remotely controlled 
power source after its pedestal 
had been removed for mainten- 
ance. 


Prohibit the use of electrical 
lamps near flammable materials 
unless equipped with adequate 
safety devices. Require safety 
inspection and certification 
of all high intensity and heat 
lamps installed near LOX, fuel, 
or ordnance areas. Ensure that 
maintenance procedures require 
positive disconnecting of all 
electrical equipment prior to 
beginning maintenance work. 
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Accident/Inc ident 
Description 

During painting of a 
static test tower at 
the 150 ft. level, 
a contractor painter was 
using a boatswain's 
chair and associated 
rigging for support. 
While the painter was 
being hoisted In the 
boatswain's chair, 
a manila rope In the 
block-and-tackle broke 
causing the painter to 
fall out of the chair 
and sustain fatal 
Injuries. 

During operational test 
of a spacecraft, a 
water glycol cooling 
circulation unit lost 
electrical power, re- 
sulting In test shut 
down for 29 minutes. 
There was no damage to 
spacecraft components. 


Causes 

Material failure in that 
the rigging rope failed. 
Contributing causes were 
inadequate work control 
over contractor activities 
and failure to require 
inspection and certification 
of the contractor's rigging 
prior to use, and failure 
of the contractor to use 
required safety restraints. 


Inadequate design in that a 
28 VDC cable plug dropped out 
of the facility receptacle 
causing the shut down. 


Recommended 

Preventive/Corrective 

Action 


Require safety inspection 
and tagging of all rope 
rigging lines to be used 
for personnel prior to 
each use, whether contractor 
or government owned. 


Require that power and 
control circuitry on 
critical test support equip- 
ment connectors be equipped 
with positive retention/ 
restraining devices. 



Accident/incident 

Description 

140. While a block-and- 
tackle rigging in an 
assembly and checkout 
facility was being used 
to lift a bundle of 
test cables, the snap 
hook sliding bar failed, 
allowing the block and 
tackle to fall, striking 
a hard-hat-wearing work- 
man on the head, causing 
minor injury. 

141. During flush line servic- 
ing, trichlorethylene 
(TRIC) vented into a 
mobile launcher work com- 
partment, necessitating 
personnel evacuation. No 
damage or injury. 
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Causes 


Inadequate work control pro- 
cedures in that lifting 
operations commenced without 
a QC or safety validation of 
rigging proof loading/ 
capacity. 


Material failure in that a 
valve failed in the mobile 
flush and purge servicer, 
allowing TRIC to leak. 


Recommended 

Preventive/Corrective 

Action 


Require inspection and vali- 
dation of special rigging set- 
ups prior to use. Ensure that 
all workmen using or rigging 
lifting gear are qualified and 
certified for their job. 


Designate all TRIC flushing 
operations as hazardous. 
Perform hazard analysis of all 
flush line servicing opera- 
tions to Identify potential 
personnel hazards and 
emergency actions In case of 
TFIC vapor release. 


4 ^ 
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Recommended 
Preventive/Corrective 
Causes Action 


Accident/Incident 

Description 

During checkout work on 
a spacecraft, a cast 
aluminum support 
fitting on a scaffold 
failed while a technician 
was climbing up. There 
were no injuries. 

During furnace brazing 
an R&D engine injector 
was destroyed when the 
furnace temperature 
increased from the normal 
1900° F. to 2400° F. 
and melted copper parts 
of the injector. There 
was also moderate structur- 
al damage to the furnace. 


Material failure in that 
the support fitting broke 
under normal service con- 
ditions as a result of fatigue. 


Require periodic safety 
inspection by supervision 
of scaffold fittings and 
supports to detect signs 
of incipient failure, such 
as thread cracks. 


Malfunction of the temperature 
control thermocouple circuit 
which gave an erroneously low 
temperature reading due to an 
electrical short circuit 
between the temperature re- 
cording Instrument inner door 
and wire of the thermocouple 
filter circuit. Contributing 
were faulty installation pro- 
cedures and poor QC inspection 
which led to the short circuit- 
ing, and inadequate design 
which did not allow for monitoring essential 
furnace temperature along with 
the temperature of the Item 
being heated. 


Ensure QC inspection of 
all electrical circuit 
installation and maintenance 
in electrical furnaces to 
be used with critical R&D 
and end item hardware prior 
to use. Ensure furnace 
brazing and heating specifi- 
cations and procedures 
require monitoring of 
furnace temperature as well 
as item temperature on all 
furnaces U3ed with program 
hardware. 


ui 



Accident/incident 

Description 

144. During torch cutting 
operations in a launch 
facility, molten slag 
fell to a lower level, 
igniting plastic film 
being used in conjunc- 
tion with a drain set- 
up. The fire caused 
only minor damage and 
no injuries. 

145. During work on an 
upper level of a mobile 
launcher, a hold down 
arm hood pivot bolt, 
which was being removed, 
was forced out and fell 
to ground level. No 
injury or damage re- 
sulted, but a similar 
mishap could cause 
severe injury or damage 
to flight hardware. 
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Causes 

Failure to follow required 
procedures in that blanketing 
of the area around the cutting 
operation was inadequate and 
permitted hot slag to fall on 
the plastic film; and the 
cutting operation was under- 
taken without prior safety 
clearance. 


Failure to follow required 
procedures in that the pivot 
bolts were removed without a 
sling and crane being attached 
to the hood to relieve pressure. 


Recommended 

Preventive/Corrective 

Action 


Ensure that all welding 
operations in a launch 
facility are safety in- 
spected prior to beginning 
work. Require safety 
training and certification 
of welders for work in 
hazardous areas. 


Ensure that procedures and/or 
checklists are followed during 
all work on flight systems and 
support structures. Where- 
ever possible, provide 
safety netting around upper 
level operations. 


« < 
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Ac c i dent/incident 
Description 

146. Several ordnance-activat- 
ed vent valves received 
minor damage when loose 
packing material in the 
store room caught fire 
from sparks of welding 
operations in an adjacent 
room. There was severe 
damage to storage area. 

No injuries. 


14-7. During assembly of a 

multiple adapter unit, 
a rivet bucking bar 
was dropped and 
impacted a coaxial 
cable connected to a 
switch box, pulling 
the cable out of Its 
connector on the switch. 
There was minor damage 
to the connector. 


Causes 

Inadequate work control of 
welding operations in 
failing to inspect for near- 
by combustibles. Contribut- 
ing cause was housekeeping 
policy which permitted storing 
flammables near ordnance 
items. 


Inadequate work control in 
that program essential equip- 
ment was not protected 
from inadvertent damage 
during assembly operations. 


Recommended 

Preventive/Corrective 

Action 


Designate all welding 
operations as hazardous. 
Require pre-operational 
area Inspection and safety 
clearance, and the use of 
a spark barricade/blanket 
for all welding operations. 
Enforce housekeeping 
policies which prohibit 
storing combustibles with 
ordnance items. 

Require protective covers 
over program equipment 
when work is being perform- 
ed adjacent to or above the 
items. Require that all 
hand tools be restrained 
when being used above 
essential equipment. Require 
screens or netting around 
work platform areas located 
above essential equipment. 
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Accident/incident 

Description Causes 


148. During handling operations, Failure to follow required 
a slide wire cable drum was procedures In that the drum 


scarred and bent when a 
locking pin lodged in the 
locking frame. 


149. While the high rise 
elevator at a launch 
and checkout facility 
was in operation, bolts 
on the stabilizer tar 
failed, allowing pieces 
to fall to lower levels. 


150. During assembly opera- 
tions in a clean room, 
a fan being used to 
circulate air into a 
unit of flight hardware 
caught fire, due to an 
electrical short result- 
ing from previous impact 
damage to the motor 
housing. 


was put into motion while 
the locking pin was being 
removed. Failure to coordi- 
nate simultaneous operations. 

Material failure in that two 
of four bolts failed, probab- 
ly due to metal fatigue. Con- 
tributing was failure to 
perform daily inspection of 
bolts when normal 5 day 
work week was extended to 
7 days. 


Procedural in that existing 
mishap reporting procedures 
did not require reporting 
of the mishap which damaged 
the motor housing. Contribu- 
ting was a design deficiency 
in that the fan did not have 
an -overheat protection device. 


Recommended 

Preventive/Corrective 

Action 


Where possible require all 
cable drums with safety lock 
mechanisms to be placarded 
with warning notices to pre- 
vent operation prior to re- 
leasing the lock. 

Ensure that facility "daily" 
inspection orocedures are 
carried out when normal work 
week is extended. 


Require that all electrical 
GSE/facility motors used 
during assembly of flight hard- 
ware be equipped with overheat 
protection devices. Establish 
procedures for immediately 
reporting and documenting all 
mishaps and corrective actions 
which involve any damage to 
GSE/facility equipment used 
during assembly of flight 
hardware. 


o\ 
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Accident/incident 

Description 


Causes 


A technician was 
opening a one pound 
can of finishing 
compound at a test 
facility when the lid 
blew off and the 
compound blew out 
Into the air. 


Material failure in that 
the compound had chemically 
decomposed from old age 
and formed a ga3 which 
created sufficient pressure 
to blow off the lid of 
the can when it was partially 
loosened. 


During assembly of a 
flight system module 
a workman fell from a 
platform, receiving 
minor injuries. 


The primary cause was that 
supervisory personnel allowed 
workmen to use an unstable 
plat form. Contributing were 
failure to make a temporary 
fix with rope, a two-month 
delay in fulfilling a repair 
work order, and a non-approved 
structural change in the 
platform. 


Recommended 

Preventive/Corrective 

Action 


Develop a program ':■? identify 
all materials subject to 
hazardous decomposition 
and establish procedures for 
their routine removal from 
stock before critical 
age is reached. 


Designate work on overhead 
platforms as hazardous. 
Ensure that supervisors 
prevent use of unsafe work 
platforms. Require prior 
approval and po3t-change 
safety inspection of all 
structural modifications. 
Establish procedures to 
expedite repair of 
hazardous personnel support 
structures. 


.ON 
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Accident/incident 

Deg c rlptic n 

While performing circuit 
etching operations during 
manufacturing, a 
technician vras exposed 
to toxic fumes. 


Causes 


Inadequate capacity of the 
exhaust system which did 
not adequately carry away 
fumes. Contributing was 
failure to check and 
monitor system for toxic 
fume s . 


Recommended 

Preventive/Corrective 

Action 


Ensure that all operations 
involving toxic fumes have 
teen checked and certified 
for safety. Require all 
exhaust systems to be 
safety verified for adequacy. 


Require that elevator portable 
control switches be designed 
to preclude inadvertent 
switching. Ensure that ele- 
vator mechanics are properly 
trained on methods and pro- 
cedures required to maintain 
a safe work area. 


During modification work on 
an elevator In a launch struc- 
ture, a mechanic apparently 
inadvertently activated a 
portable elevator control 
switch, moving the elevator 
downward and trapping his 
arm between elevator and 
shaft structure, resulting 
in serious Injury and subse- 
quent amputation of the arm. 


Personnel error due to poor 
work area practices and pro- 
cedures by placing switch 
where it could be inadvertently 
activated. Contributing was 
design deficiency in that the 
portable switch could be in- 
advertently struck by some 
object or stepped on thereby 
activating the elevator move- 
ment. 


o 
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Ac c i dent/lnc i dent 
Description 

During routine test 
work at a laboratory 
work table configured 
with an RF induction 
heater, a research 
assistant received 
electrical shock re- 
sulting in arm burns, 
due to contact with 
an exposed RF outlet. 

Following operational 
checkout of an electro- 
magnetic interference 
(EMI) test set-up in 
an RF anechoic chamber, 
a fire occurred in the 
RF absorber, resulting 
in minor damage to the 
absorber. 
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Causes 


Inadequate design of warning 
devices in that although a 
blinking red light was 
activated when the RF power 
was on, it was so located 
that the technician could, and 
did, fail to notice it. Con- 
tributing was inadequate 
shielding on the RF outlet. 


Design deficiency in that 
the RF absorber was not 
grounded, permitting arcing 
between the RF coax cable 
and the absorber when the 
cable was in closeproximity 
to the absorber. 


Recommended 

Preventive/Corrective 

Action 


Require safety review/ 
verification of laboratory 
warning systems and RF 
power out let. 3 for adequacy 
and compatibility 
with laboratory operations.- 


Establish a standard for 
EMI test set-up in an RF 
anechoic chamber, including 
a requirement for minimum 
one foot separation between 
absorber and cable. When 
RF cables carry more than 
10 volts, additional ground- 
ing, adequate to prevent 
cable Jacket RF voltage 
build-up must be provided. 



Accident/incident 

Description 

During development test- 
ing, the sight gage 
of a steam generator 
on a laboratory auto- 
clave sterilization unit 
failed, releasing 
steam and water. An 
employee attempting to 
clear the area, received 
minor injury when he 
slipped and fell. Only 
the gage was damaged. 

During post operational 
testing, personnel in a 
facility laboratory were 
exposed to toxic Beta- 
propiolactone (B-P) 
vapors emanating from a 
broken 1 Kg. bottle of 
crystallized E-P stored 
in a cabinet. B-? was 
not used in the lab and 
lab technicians had no 
knowledge that it was 
present or how it had 
gotten there. No seri- 
ous injury resulted. 
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Causes 


Inadequate inspection/ 
checkout procedures in 
that the unit had been 
damaged during shipment 
and there was no record 
that the unit had been 
inspected and checked 
out at the time of 
activation (approximately 
1 month prior to the mis- 
hap. ) 


Inadequate work control 
in that the B-P apparently 
had been stored in the 
cabinet a long time without 
having been discovered or 
inventoried. Contributing 
was Inadequate storage 
procedures in that B-P should 
be stored at+ 5 4 to-#- 10* C. 


Recommended 

Preventive/Corrective 

Action 


Require formal inspection 
and verification of pressure 
units damaged in shipment 
prior to operational 
activation. 


Require, as a minimum, 
quarterly safety inspections 
of laboratories to ensure 
that any hazardous chemicals 
or conditions are identified. 
Implement formal procedures 
for requisitioning and 
control of hazardous 
chemicals in laboratories. 
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Accident/Incident 

Description 


Causes 


159- During manufacturing 
operations, a worker 
who was standing on the 
catwalk of a space 
vehicle support fixture, 
fell through a 12"-l4" 
access opening between 
the end of the handrail 
and end of the catwalk 
and landed on the vehicle. 
The worker sustained a 
concussion and other 
injuries. There was no 
damage to the vehicle. 

160. After working hours, a 

fire occurred in a ware- 
house due to ignition of 
oil- saturated cardboard 
boxes by radiated heat 
from a heat sealer, 
destroying 20 pieces 
of electronic equipment 
and causing first and 
second degree bums to a 
night watchman who 
attempted to extinguish 
the fire. 


Inadequate work area 
procedures in that there 
was no protective barrier 
or warning placard at the 
opening to prevent personnel 
from inadvertently falling 
through. 


Inadequate work control in 
that an electrical heat 
sealing device located among 
the cardboard boxes was 
left on at the end of the 
working day. Contributing 
was inadequate housekeeping 
of the packing area in that 
flammable material was 
stored in the packing area. 


Recommended 

Preventivq/Corrective 

Action 


Ensure that work pro- 
cedures require safety in- 
spection of catwalks/ 
workstands at completion of 
initial assembly and when 
changing their configuration 
to verify the adequacy of 
barriers and warning placards. 


Require procedures/checklists 
for supervisory inspection 
of packaging areas for hazards 
at end of work shift. 

Develop procedures and check- 
lists for identification of 
flammable materials and store 
them in areas separate 
from packing operations. 


o-i 
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Accident/incident 

Description 

l6l. During maintenance 

operations a technician 
was disconnecting a 
mercury-filled vacuum 
gage from a hypobaric 
test chamber when the 
gage broke, causing 
mercury to splash on 
his face and into his 
eyes. 

lo2. During equipment main- 
tenance in a thermo- 
chemical test laboratory, 
chilled Freon 22 splash- 
ed on a technician from 
an uncapped line he had 
previously disconnected, 
causing extensive first 
degree burns. 

1 £ 3 . During Installation of 
a large vacuum testing 
chamber, workmen using 
a cutting torch dropped 
slag onto freon line 
insolation, starting a 
fire. 


Causes 

Personnel error. The 
technician bumped the gage 
with sufficient force to 
break it while attempting 
to remove a flexible 
connection which attached the 
gage to the chamber. 


Inadequate procedures in 
that the technician did not 
install a cap on the open 
tube to prevent the liquid 
Freon 22 from escaping when 
the pressure built up due to 
gas vaporization. 


Procedural in that no 
asbestos fire blanket was 
used and no fire watch 
set. Also, the required 
"Hazardous Operation Work 
Permit" had not been 
obtained. 


Recommended 

Preventive/Corrective 

Action 


Instruct and certify 
technicians in proper pro- 
cedures for protecting 
delicate/hazardous instrument 
during maintenance operations 
Whenever possible, replace 
mercury-filled gages with 
a satisfactory mercury- 
free substitute, such as 
a capacitance manometer. 

Ensure work procedures 
require that the open ends 
of all fluid/gas lines be 
capped during maintenance/ 
modification operations. 


Designate all welding 
and cutting torch operations 
as hazardous. Require 
safety inspection and 
verification prior to be- 
ginning all such operations. 
Stress the necessity for 
supervisory personnel to 
closely monitor welding 
and cutting operations. 
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l64. 
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Accident/incident 

Description 

Following testing 
operations In a labora- 
tory, a nitrogen valve 
In a mass spectrometer 
was left on resulting 
in split water lines and 
damage to the facility 
floor. 

During maintenance 
welding and cutting 
operations in a flight 
simulation laboratory 
hot slag fell on an air 
duct and ignited the 
insulation, resulting in 
minor damage. 


Cause 8 

Inadequate work control 
in that the nitrogen valve 
was not shut off at the 
end of the day. 


Procedural in that no 
asbestos fire blanket was 
used. Also, the required 
"Hazardous Operation Work 
Permit" had not been 
obtained. 


Recommended 

Preventive/Corrective 

Action 


Develop checklists for 
daily activation and shutdown 
of laboratories and ensure 
their use by all laboratory 
personnel. 


Designate all welding 
and cutting torch operations 
as hazardous. Require 
safety inspection and 
verification prior to 
beginning all such opera- 
tions. Stress the necessity 
for supervisory personnel 
to monitor welding/cutting 
operations. 





Accident/incident 

Description 


During crew training 
in astronaut rescue 
procedures, the test 
subject suffered a 
back injury while 
being removed from 
the test chamber. 


While performing 
routine maintenance 
on the rail of a mon- 
rail hoist near the 
ceiling of a hypobaric 
chamber, a workman 
received a severe 
electrical shock when 
his hand came in contact 
with the 480 VAC bus 
bar channel in the 
rail. He fell off the 
hoist but was caught 
by other workers. 
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Causes 


Inadeouate work control. 

The trainees were allowed 
to pull the test subject 
from the chamber while 
the bulk. of his weight 
was still suspended from 
an overhead rail. Possibly 
contributing was failure 
to report' a previous 
similar injury which may 
have left test subject's 
back in a weakened condi- 
tion. 

Inadequate work control. 

The workman used the 
hoist as a work platform 
instead of using a ladder 
or portable scaffolding, 
and also was not using 
a safety harness. 


Recommended 

Preventive/Corrective 

Action 


Ensure close supervision 
of rescue training pro- 
cedures by qualified 
personnel. Require 
periodic medical examina- 
tion and qualification 
of all research and 
training test subjects. 


Establish positive work 
control procedures to 
ensure the briefing of 
workers on Job requirements, 
restrictions and potential 
hazards. Require the use 
of safety belts for all 
overhead work where there 
are no railings or other 
positive safety restraints. 
Require electrical power to 
be shut off and locked out 
on hoisting equipment when 
not in use. 
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Accident/incident 

Description 

168. While relocating a 
work platform during 
spacecraft manufacturing 
operations, a welding 
machine on top of the 
platform fell to the 
floor resulting in 
extensive damage to 

the machine . There 
was no personnel Injury 
or damage to flight 
hardware. 

169. During post assembly 
flushing and drying 

of spacecraft plumbing, 
the flushing cart pump 
motor overheated and 
caught fire, resulting 
in damage to the motor. 

170. During assembly inspec- 
tion of a stage from an 
upper level work platform, 
a workman dropped a 110 
VAC portable work light 
onto the stage forward 
bulkhead protective 
cover. The cover pre- 
vented any flight hard- 
ware damage. 


Causes 


Personnel error in that 
there was failure to secure 
the welding machine in 
accordance with established 
procedures. Contributing 
was inadequate work control 
procedures in that there was 
no requirement to verify the 
safe configuration of the 
platform area prior to move- 
ment. 


Inadequate design since the 
motor was not equipped with 
a thermal overload protection 
device. 


Inadequate work control 
in that the work light was 
not tethered. Contributing 
was' personnel error in that 
the employee failed to 
exercise adequate precautions 
when working on flight hard- 
ware. 


Recommended 

Preventive/Corrective 

Action 


Require safety inspection 
and verification that 
tools and equipment on 
work platforms are removed 
or secure prior to platform 
movement. 


Require that all GSE/facility 
equipment motors used 
during as3embly/test of 
flight hardware have thermal 
overload protection devices 
installed. 


Require tethering of 
equipment/tools used cn work 
platforms above flight hard- 
ware. Require that personnel 
working above and around 
flight hardware be certified 
and instructed in work pro- 
cedures to prevent tool/ 
hardware droppage. 


ON 
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Accident/Incident 

Description 

During manufacturing 
assembly of a flight 
module, a clevis pin 
fell from an upper 
work level into an 
uncovered section of 
the module and did 
minor damage to 
installed equipment. 


During the installation 
of a kick plate on a 
work platform in a 
stage manufacturing 
area, the stage side- 
wall Insulation was 
struck by the kick 
plate resulting in Inden- 
tation in the spray 
foam approximately 4" 
long by wide. Stage 
move was delayed 1^ 
hours. 


Causes 


Inadequate work control in 
that there was no protective 
barrier in place to catch 
the falling clevis pin. 
Contributing was personnel 
error in that an employee 
at the upper level failed to 
exercise adequate precaution 
when working on flight hard- 
ware. 


Failure to exercise adequate 
supervision and maintain 
proper work control. 


Recommended 

Preventive/Corrective 

Action 


Require installation of 
barriers and/or catch nets 
when work is being performed 
above flight hardware. 
Require that personnel work- 
ing above and around flight 
hardware be instructed and 
certified In work procedures 
to prevent tool/hardware 
droppage. 


Require that personnel 
working around flight hardware 
be instructed and certified 
In work procedures to 
prevent flight systems damage. 
Where possible, install 
removable work platform items 
prior to positioning platform 
at work station. 
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Accident/Incident 

Description 

♦During structural modi- 
fications on top level 
of a mobile service 
tower, molten slag from 
a cutting torch became 
Imbedded in the styro- 
foam sandwich wall of 
the environmental enclo- 
sure causing delayed 
ignition of the wall 
while the workers were 
absent for lunch. Fire 
hydrants were not 
connected at that level 
and COg extinguishers 
failed to put out fire. 
After burning for half 
an hour, the fire was 
extinguished by station 
firemen after hoses were 
pulled up from a ground 
level hydrant. This mis- 
hap resulted in major 
damage to the facility. 


Causes 


Inadequate work control 
procedures in that the con- 
tractor failed to enforce 
adequate fire preventive 
procedures during welding/ 
cutting operations and 
failed to provide proper 
training for his workers. 
Contributing were contractor 
failure to station a watch- 
man In the work area when 
the torch cutting operations 
were suspended and manage- 
ment failure in not ensuring 
that the service tower 
water system had been 
connected to the station 
water supply prior to opera- 
tions on the tower. 


Recommended 

Preventive/Corrective 

Action 


Designate all operations 
which use welding/cutting 
torches or electrodes as 
hazardous. Require fire 
safety inspection of all 
welding operations prior 
to commencement. Ensure 
that work control procedures 
provide for implementation of 
fire safety precautions, such 
as use of asbestos blankets 
to catch sparks and molten 
slag, and/or briefing and/or 
certification of workers on 
hazardous operations. Require 
a fire watchman to be posted 
during breaks and lunch 
period and for a minimum of 
one hour following operation 
shut down in all areas where 
welding/cutting operations 
are underway near flight 
systems. 


♦This mishap was not associated with manned 
space programs; however, it was considered 
significant enough in terms of amount of 
loss and lessons learned to include in 
this summary. 



Ac c i dent/Inc i dent 
Description 

65. During fueling of a 
space vehicle at a 
test facility, hydrazine 
fuel was Inadvertently 
pumped from the storage 
tank through the waste 
pond rather than Into 
the vehicle’s fuel tank. 

66. While using an acetylene 
torch to loosen rusted 
strap hold-down nuts on 
a hydrogen trailer, 
workmen discovered two 
H2 cylinders still held 
over 2000 psl pressure. 

No mishap occurred, but 
the risk of explosion 
was great. 

67. During a manufacturing 
leak check of a fuel 
system ball check valve, 
leak test compound was 
drawn into the ball 
valve's actuating cylinder 
through a vent port, 
resulting in removal, 
cleaning, reinstallation 
sind retesting of the 
valve. 
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Causes 

Personnel error in which 
a technician failed to close 
the fuel dump valve in 
accordance with operating 
procedures although he and 
QC verified that it was 
closed on the work sign- 
off sheet. 

Personnel error. Cylinders 
were inspected and erroneously 
tagged as inert. Contributing 
was Inadequate work control 
in that during a subsequent 
inspection, the torch was 
allowed to be used before 
inspection was completed. 


Personnel error in that 
technician failed to exercise 
proper care in carrying out 
leak test procedures. 


Recommended 

Preventive/Corrective 

Action 


Implement safety training 
and awareness programs to 
motivate all personnel 
to be especially attentive 
to comply with all work 
control orocedures in 
hazardous operations. 


Require formal safety approval 
before torches may be used 
near flammable gas producing 
or storage facilities and 
equipment. Require depres- 
surization, purging and cer- 
tification prior to placing 
inert tags on H cylinders. 

2 


Ensure that leak test 
technicians are adequately 
trained and instructed in 
leak test procedures and 
mean3 to avoid contamination 
of test articles. 
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Ac e i dent/Inc 1 dent 
Description 


Causes 


Recommended 
Preventive/Correct 1 ve 
Action 


During manufacturing 
and while performing 
LHo propellant valve 
purge flow checks on 
an OpH^ bi/rner, a 
portable flow meter 
ruptured and was 
destroyed when inadver- 
tently subjected to 
excessive pressure due 
to sealed flow meter 
discharge ports. Three 
workers sustained minor 
injuries. 


Personnel error in that 
technician failed to check 
the flowmeter discharge 
port 8, which were sealed 
with threaded B-nut caps. 
Contributing was a design 
deficiency in that no 
inlet low pressure relief 
valve was provided in the 
flowmeter configuration. 


Require that portable flow- 
meter installation and 
checkout procedures include 
caution and warning notes 
about removing seals or 
caps from discharge ports; 
require checklist verification 
of test set-up prior to 
initiation of test. Where 
possible, provide for and 
require the use of relief, 
valves in portable flowmeter 
installations. 


During torque wrench 
tightening of a "B" 
nut on a GSE fill/drain/ 
feed line attached to 
a spacecraft oxidizer 
fi ll/dr ain/feed line, 
the feed line buckled 
due to overstress 
caused by leverage of 
the torquing operation. 


Deficient assembly pro- 
cedures in that off -vehicle 
assembly of the GSE fill/ 
drain line could have been 
accomplished prior to connec 
tion to flight hardware. 


Avoid assembly of GSE 
lines after attachment to 
flight systems; require a 
bench assembly to the point 
of GSE/f light hardware 
interface. 



SECTION IV 

FUEL/PROPELLANT SYSTEMS 


Ac c i dent/Inc 1 dent 
Description 


70. Five personnel were 
exposed to toxic 
nitrogen tetroxlde fumes 
when a vapor cloud 

was Inadvertently releas- 
ed without warning during 
oxidizer loading opera- 
tions in an adjacent work 
area 150 feet directly 
upwind of their work 
area. 

71. During checkout of fuel 
vent quick disconnect 
hose assemblies, a fuel 
weigh tank top was blown 
off and attached flex 
hoses, tubing, and gage 
were destroyed. There 
were no injuries. 


Causes 


Inadequate work control 
procedures in that there 
was lack of coordination of 
safety responsibilities 
between the two work areas; 
and no "on-3ite M procedures 
for local evacuation of 
individual work areas. 


Personnel error In that a 
test valve was incorrectly 
positioned (opened) causing 
overpressurization. Con- 
tributing was an Inadequate 
checklist which permitted 
bypassing a sequence check, 
and resulted in tank being 
pressurized due to the open 
valve. 


Recommended 
Preventive/Corrective 
Action 


Establish procedures for 
assignment of responsi- 
bility for overall safety 
of all hazardous operations 
between all potential hazard 
areas. Ensure that all 
hazardous areas have an 
effective evacuation plan 
consistent with the type 
or types of emergency potential. 


Designate all fuel system 
checkouts as hazardous. 

Require safety review/analysis 
of procedures and checklists 
to ensure adequacy of 
caution and warning notes, 
and to identify safe 
sequence of operations. Require 
that checklists be followed with- 
out deviation whenever 
fuel tanking and detanking 
operations take place. 




SECTION IV 

FUEI/PROPELLANT SYSTEMS 


Ac c i dent/Inc 1 dent 
Description 


During preparation for 
test firing of a 
spacecraft system 
engine, a fuel (helium 
saturated aerozlne-50) 
auxiliary conditioning 
unit (ACU) electrical 
heater assembly on the 
test stand ruptured, due 
to auto-ignition of fuel 
vapor within the heater 
case, resulting in minor 
ACU and test stand damage, 
and inhalation by nearby 
workmen of toxic fuel 
vapor created by the 
rupture. The rupture' 
occurred after the heater • 
unit had been turned on 
but prior to start of fuel 
flow. 


Causes 


Deficient test GSE design 
in that the heater used 
(calrod Immersion type) per- 
mitted direct contact between 
the heater elements and a 
flammable liquid; the heater 
orientation within the ACU 
created a high point vapor 
trap thus exposing some of 
the heater elements to fuel 
vapor; the design provided no 
electrical interlock to 
preclude energizing the heater 
prior to starting the fuel 
circulating pump; the heater 
controls were placed in such 
a configuration that they did 
not reflect the true tempera- 
ture within the heating unit. 
Contributing was a deficiency 
within the test procedures that 
permitted energizing heater 
colls before circulation of 
fuel was established in the 
test sequence. 


Recommended 

Preventive/Corrective 

Action 


Require the use of a 
non-hazardous intermediate 
heat transfer fluid such 
as water to separate 
hazardous fluids from 
direct contact with heating 
elements. Require safety 
review/analysis of hazard- 
ous test procedures to 
verify compatibility between 
procedures and test set-up, 
and to identify safe 
procedural sequencing. 



SECTION IV 

FUEL/PROPELLANT SYSTEMS 


Ac c i dent/Inc i dent 
Description 

IXaring replacement of a 
millipore teflon filter 
in an aerozine -50 fuel 
system, the element 
burst into v flame as 
it was placed on the 
filter plate. The re- 
sulting fire vras ex- 
tinguished with water 
spray. No personnel 
injury. 

During fuel conditioning 
operation at a test 
facility when the fuel 
inlet line to the pump 
was opened toxic fuel 
spilled onto the ground 
through the outlet 
valve which was in an 
Indicated closed position. 
Seventy gallons of fuel 
were pumped out onto the 
ground before the Inlet 
line could be closed by 
"scape" suit procedures. 


Causes 

Inadequate QC because a 
non-compatible filter was 
used with aerozine- 50 , 
resulting in ignition of 
the element and the resid- 
ual fuel in filter bowl 
assembly. A contributing 
cause was the nearly 
identical part numbers of 
the correct and incorrect 
filters. 

Inadequate laboratory 
maintenance procedures which 
made the valve handle 
indicate closed when the 
orifice was actually open. 


Recommended 

Preventive/Corrective 

Action 


Require QC verification of 
replacement parts, prior to 
installation, on any fuel 
system to ensure compatibility. 


Ensure that indicating 
valve maintenance pro- 
cedures require functional/ 
visual check of valve 
for proper indication prior 
to release for installation. 


Accident/incident 

Description 

During removal of a 
spacecraft module 
fuel tank assembly 
from a holding fix- 
ture during manu- 
facturing, the assembly 
contacted the fixture 
and sustained damage 
to fuel line and 
bellows, due to close 
clearances between 
the tank and the 
holding fixture. 
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FUEL/PROPELLANT SYSTEMS 


Causes 


Inadequate work planning 
in that a hoist was select- 
ed and used to remove the 
tank from a close tolerance 
fixture. Contributing was 
deficient fixture design due 
to lack of consideration for 
parts removal and handling 
clearance. 


Recommended 

Preventive/Corrective 

Action 


Require the use of 
"hydraset" control with 
hoists when removing parts 
from close tolerance fix- 
tures. Require manufactur 
ing operations review of 
holding fixtures designs 
to -assure compatibility 
with parts removal opera- 
tions. 



SECTION V 

LIFE SUPPORT SYSTEMS 


Accident/incident 

Description 


Causes 


Recommended 

Preventive/Corrective 

Action 


19. During purging and inspection Personnel error In that the 
of a life support system, an cabin atmosphere had been 
employee entered a spacecraft improperly certified as 


cabin with oxygen deficient 
atmosphere and was rendered 
partially unconscious. 


breathable. Contributing 
was the erroneous classifica- 
tion of the inspection pro- 
cedure as "no safety hazard 
involved. " 


Designate all life support 
system purging operations as 
hazardous. Train and certify 
all personnel involved in 
these operations for their 
Jobs. Require safety clear- 
ance prior to opening and 
entering sealed spacecraft 
hatches. 


20. During verification 

. test of a life support 
system the test was 
prematurely terminated 
due to failure of an 
oxygen circulation fan/ 
motor within the system 
to start up, caused by 
corrosion seizure of a 
fan/motor bearing. 
Subsequent Investigation 
revealed that the 
corrosion was caused by 
water which had been 
introduced unknowingly 
into the life support 
system oxygen loop during 
a previous spacecraft/ 
life support system 
compatibility test. 


Deficient compatibility 
test procedures In that a 
design limitation of the 
life support system was 
not recognized during pro- 
cedures development. This 
limitation allowed water 
to be introduced unknowingly 
through a closed water shut- 
off valve (leakage) in the 
system, under conditions 
of test pressure/time -span. 

As a consequence, available 
oxygen loop dry-out. procedures 
used when water was knowingly 
introduced into the loop were 
not implemented. 


Require safety review/ 
analysis of safety critical 
systems test procedures 
during their development, 
to make certain that the 
test operations will pro- 
vide timely removal of all 
system contaminants that 
may be Introduced by the 
test conditions. 
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SECTION V 

LIFE SUPPORT SYSTEMS 


Ac c i dent/Inc i dent 

Description Causes 


21. During a rehearsal of 
a simulated altitude 
chamber test, a 
ribbon antenna atop a 
mobile life support 
system was cracked 
halfway through. 

22. During manufacturing 
de- soldering operations 
on ECS p.lumbing. Methyl 
-Ethyl Ketone (MEK) used 

as a solvent caught fire. 
No damage or injury. 


23. During the removal of 

an environmental control 
unit from a flight 
module, a water-glycol 
line on the unit was bent 
and subsequently broke 
while being straightened. 


Design deficiency in that 
the life support system 
thermal cover flap was 
inadequate to protect the 
stowed antenna from being 
damaged during the couch 
change-out exercise. 

Procedural in that flammable 
MEK was not prohibited for 
use in soldering operations. 
Contributing was personnel 
error in using a soldering 
iron before the solvent was 
completely dry, and super- 
visory failure to prevent 
use of a flammable solvent 
near a heat source. 

Inadequate work control 
procedures in that the water- 
glycol line was not adequately 
protected. 
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Recommended 

Preventive/Corrective 

Action 


Assure that design of 
protective covers over 
life- support systems 
provide shielding against 
damage for protruding parts 
of ancillary system components. 


Avoid use of MEK during 
soldering operations. 


Require training and 
certification of personnel 
assigned to remove/install 
equipment in spacecraft, 
to emphasize avoidance of 
equipment damage. Require 
Installation of protective 
barriers/blankets and warning 
placards during equipment 
installation and removal. 



SECTION V 

LIFE SUPPORT SYSTEMS 


Accident/incident 

Description 


24. While attaching a 3/3" 
water glycol line during 
installation of a flight 
fuel cell simulator, the 
line twisted out of blue- 
print configuration before 
reaching torque value on 
attaching "B" nut, re- 
sulting in removal and 
replacement of the line. 

25. During assembly leak 
test of an ascent stage 
water system, contamina- 
tion fluid from a leak 
meter was pulled into the 
water system lines due to 
omission of a step in the 
test procedure that re- 
quired leak meter disconnec- 
tion. 


Causes 

Material failure in that 
the B-nut rotated freely, 
but its sleeve was frozen 
to the tube. Contributing 
was inspection failure 
to identify the defective 
line prior to installation 
operations. 


Inadequate work control 
of test operations that led 
to a momentary lapse in 
attention by an experienced 
test team. Contributing 
could have been the lack 
of a caution note in the 
procedure at each step 
where leak meters were 
scheduled to be disconnect- 
ed. 


Recommended 

Preventive/Corrective 

Action 


Designate flight systems 
lines safety critical 
items, requiring QC 
tagging and validation 
during receiving/issue 
actions and prior to 
installation operations. 


Require the use of 
formal procedures/checklists 
during leak test of program 
essential equipment to 
verify proper test sequencing. 
Require safety review of 
leak test procedures to 
provide caution and warning 
notes. 
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Accident/incident 

Description 

During a space suit 
fan functional checkout, 
as a result of an 
unscheduled test shut- 
down, a fan designed for 
use at 10 psla was in- 
advertently run for l£ 
minutes at full atmospheric 
pressure and potentially 
damaged. There were no 
injuries. 

During post leak test 
disassembly of an 
oxygen purge system 
oxygen regulator a damag- 
ed "0" ring seal and 
"delta" ring were found; 
the damage was due to 
their improper installation 
at the time of regulator 
assembly. 
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LIFE SUPPORT SYSTEMS 


Causes 


Personnel error in that 
there was a failure to follow 
approved, written procedures to 
cut electric power to the fan 
before shutting off the test 
system vaduum pump. 


Deficient procedures govern- 
ing regulator assembly/ 
inspection in that there was 
no requirement to verify 
the proper installation of 
the seals during assembly 
operations. 


Recommended 

Preventive/Corrective 

Action 


Require use of checklists 
in conjunction with 
written procedures to 
ensure completion of 
essential steps in test 
sequence of flight systems 


Require formal manufactur- 
ing QC procedures to 
control assembly of non- . 
metallic seals and parts; 
require inspection to 
verify their proper in- 
stallation during assembly 



SECTION V 

LIFE SUPPORT SYSTEMS 


Accident/Incident 

Description 

During manufacturing 
one sector of a space- 
craft sun sensor 
was broken loose 
during removal of its 
protective cover 
preparatory to painting 
the 3ensor supporting 
structure. 


Causes 


Inadequate work control. 
Workman removing the 
cover was not authorized 
or trained to do so. 


Recommended 

Preventive/Corrective 

Action 


Ensure that only trained 
and certified workmen 
are used to install and 
remove flight hardware 
and related protective 
covers. 
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SECTION VI 
ORDNANCE SYSTEMS 


Ac c i dent/Inc 1 dent 
Description 


Cause 8 


Recommended 

Preventive/Corrective 

Action 


No Accidents/incidents pertaining 
to Ordnance Systems recorded In 
the 1970-1971 period. 
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SECTION VII 
PRESSURE SYSTEMS 


Accident/incident 

Description 


Causes 


While being proof tested 
to 6000 psig, a stain- 
less steel braided flex 
hose in a test fixture 
line ruptured at 3000 
psig. No injuries. 


During laboratory test 
evaluation of a regula- 
tor, a flowmeter ex- 
ploded, injuring two 
technicians. 


While being proof tested 
to 6000 psig, a flex hose 
ruptured at 4000 psig. 

One employee sustained 
minor injury. 


Personnel error. The hose 
was incorrectly tagged for 
test to 6000 psig, which 
was above its burst rating. 
Contributing was inadequate 
inspection procedures which 
allowed the incorrectly 
tagged hose to be set up 
for test. 

Personnel error because the 
flowmeter outlet diameter had been 
reduced from 1-1/2" to 1/4", 
restricting flow, thus 
causing meter to exceed its 
design pressure and explode. 

The modification was not 
authorized by approved pro- 
cedures. 

Personnel error. The hose was 
incorrectly tagged with a 
proof pressure that was act- 
ually above its burst rating. 
Contributing was inadequate 
inspection procedures which 
allowed the incorrectly 
tagged hose to be set up 
for test. 
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Recommended 
Prevent ive/Coi’rective 
Action 


Ensure that hose part numbers 
are cheeked against listed 
pressure ratings prior to 
tagging. Require that pressure 
rating tags be checked against 
part numbers and validated 
prior to proof testing. 


Require standards/procedures 
for laboratory modification of 
high pressure equipment. Re- 
quire inspection of high 
pressure equipment modifications 
prior to operation. 


Ensure that hose part numbers 
are checked against listed 
pressure ratings prior to tag- 
ging. Require that pressure 
rating tags be cheeked against 
part numbers and validated prior 
to proof testing. Ensure that 
personnel protective equipment 
is adequate in pressure proof 
testing areas; barriers should 
be installed to isolate the 
test set-up. 
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SECTION VII 
PRESSURE SYSTEMS 


Accident/Incident 

Description 

During development and 
qualification testing, 
a facility high pressure 
air line operating at a 
normal 3400 psig pressure 
failed at an elbow swage- 
lock fitting and caused 
minor damage to the build- 
ing fixtures from conse- 
quent whipping action. 


During operational test- 
ing of a space flight 
simulator, a 3000 psi 
hydraulic line pulled out 
of its ,f B" nut connection 
and sprayed hydraulic 
fluid over a portion of 
the facility. No damage 
or personnel injury. 


Causes 


Improper assembly in that a 
reused swagelock fitting did 
not match the type of tubing 
used and was improperly 
fitted. Contributing were 
a design deficiency in that 
the assembly drawings used 
were not approved by quali- 
fied engineers; QC failure 
to inspect for proper fit- 
tings and workmanship; and 
inadequate tie-down of the 
air line. 


Improper installation of the 
line assembly in that the 
,f B" nut was loose, allowing 
pressure on the line to 
straighten out the tube 
flare causing the line to 
blow out from the simulator 
unit. 


Recommended 

Preventive/Corrective 

Action 


Require certification of per- 
sonnel assigned to assemble and 
maintain high pressure systems. 
Ensure that design of high 
pressure systems is performed 
by qualified and experienced 
personnel. Require formal QC 
inspection of high pressure 
systems for compliance with de- 
sign specifications prior to 
system activation. Ensure that 
all high pressure hydraulic and 
air lines are secured at 6-foot 
intervals. 

Require formalized procedures to 
inspect and verify pressure 
connections for program simulator 
equipment prior to test commence- 
ment. 
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SECTION VII 
PRESSURE SYSTEMS 


125. 


126. 


Accident/incident 

Description 


During operational check- 
out of a test equipment 
modification in a down 
flow clean room, a 60 psig 
air line was inadvertently 
connected to a vacuum gage 
port, resulting in des- 
truction of an absolute 
pressure gage. 


During visual inspection of 
a high pressure system in 
a facility supplying gas . 
to test cells, desiccant 
particles were found, re- 
sulting in a shut-down of 
the system for investiga- 
tions and repair. 


Causes 


Procedural due to lack of 
detailed checkout/activation 
procedures and checklists 
and lack of QC certification. 
Contributing were test system 
design deficiencies in lack 
of positive identification 
of inlet and outlet ports 
and lack of an absolute gage 
pressure relief valve. 


Inadequate supply system de- 
sign in that one of the dry- 
ing filters ruptured, caused 
by a normal rapid pressure 
drop on the downstream side 
of the filter, creating a 
venturi, or vacuum, effect. 


Recommended 

Preventive/Corrective 

Action 


Require that formalized test 
set-up and operational pro- 
cedures be established for acti- 
vation/testing of pressure 
systems which include precaution- 
ary warnings and QC verification. 
Inlet and outlet ports should be 
clearly marked, and designed to 
prevent inadvertent cross connect 
ions. Require installation of 
pressure relief devices on all 
pressure gages. 

Require that pressure systems 
used in test of flight hardware 
be designed with sensing and re- 
lief devices to detect pressure 
variations and protect critical 
filters in the system; support 
design development with system 
safety analyses/reviews. 
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Ac c 1 dent/lnc i dent 
Description 

While operating the purge 
and vacuum console during 
pre-launch checkout, the 
operator turned the regu- 
lator clockwise instead 
of counter-clockwise, re- 
sulting in overpressuriza- 
tion of the system. No 
damage resulted. 


During vehicle assembly at 
a launch facility, a helium 
control system solenoid 
valve on an engine was 
found to have four radial 
scratches across the out- 
let port sealing surface. 
The valve was rejected 
from service. 


SECTION VII 
PRESSURE SYSTEMS 


Causes 


personnel error in that the 
technician turned the regu- 
lator in the opposite di- 
rection from that called 
out in the test procedure. 


Personnel error. Failure to 
carry out the required com- 
plete inspection of the valve 
during source inspection. 


Recommended 

Preventive/Corrective 

Action 


ftisure that test operators are 
certified and trained in 
pressure system adjustment 
techniques. Require caution 
and warning notes in test pro- 
cedures governing pressure 
control adjustments. Use 
directional decals/placards on 
test consoles to indicate proper 
adjustments. 

Require the use for formal 
checklists during source in- 
spection of program critical 
equipment to verify completion 
of all elements of the in- 
spection sequence. 
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SECTION VII 
PRESSURE SYSTEMS 


Accident/incident 

Description 


129. During oxygen sampling of 
the crew umbilical system 
of an altitude chamber, a 
GOX hose was erroneously 
disconnected, pressurizing 
the hose to 173% of design 
burst level. The hose did 
not fail and there was no 
damage or injury. 


130. While investigating 

apparent nonoperation 
6f a gas generator blade 
valve during system check- 
out, employee had finger 
amputated when the valve 
was suddenly activated by 
an operator at a remote 
location. 


Causes 


Design deficiency in that 
interconnect hose fittings 
contained a self-sealing 
valve which caused the hose 
pressure to increase above 
design burst level follow- 
ing inadvertent disconnect. 
Contributing was a pro- 
cedural error in disconnect- 
ing the line while still 
pressurized. 

Failure to follow approved 
safety precautions in that 
the employee had not informed 
the engineer in charge of 
valve activation that he was 
working on the valve; there 
was no continuing communication 
between the remote operator and 
the workman, and no lock-out 
procedures to prevent valve 
activation. 


Recommended 

Preventive/Corrective 

Action 


Review design standards for LOX 
and GOX hose connections to en- 
sure the prevention of 
hose overpressurization follow- 
ing inadvertent disconnect. Re- 
quire check-off verification of 
depressurization prior to all 
hose disconnects. 


Require that system trouble- 
shooting operations be approved 
by the engineer with functional 
control authority over the system 
prior to commencement. Ensure 
that system controls are "locked 
out" either mechanically or with 
warning tag while the system is 
being worked on. Ensure positive 
communication between employees 
working on systems at remote lo- 
cations and operators and engineers 
in charge of system activation. 
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SECTION VII 
PRESSURE SYSTEMS 


Accident/Incident 

Description 


During leak check of a 
test pressure container, 
the burst disc of the 
container ruptured due 
to overpressure caused 
by incomplete closing of 
the manual test gas valve, 
resulting in minor injury 
(ear drum damage) to three 
workmen. 


During pressure adjust- 
ment to reseal a mercury 
sealed piston in a flow 
rate calibrator, a 
pressure gage on the 
test bench exploded due 
to inadvertent applica- 
tion of overpressure 
from the supply source, 
resulting in injury to a 
test technician (shattered 
tempered glass dial cover 
showered face and upper 
body with glass fragments)* 


Causes 


Inadequate test set-up de- 
sign in that the test gas 
system contained no relief 
valve or pressure regula- 
tion within the safe work- 
ing pressure of the test 
article. Contributing 
was the failure to follow 
procedures in that closure 
of the test gas valve was 
not verified. 

Inadequate test bench de- 
sign in that there was no 
automatic pressure relief 
device between the exploded 
gage end the supply source; 
the exploded gage had no 
safety shield; and there 
was no pressure gage to in- 
dicate the amount of pressure 
applied to the calibrator. 
Contributing was inadequate 
work control in that pressure 
• valve/regulating devices on 
the test bench were positioned 
without authorization during 
the resealing operations. 


Recommended 

Preventive/Corrective 

Action 


Require installation of pressure 
regulators and relief devices in 
test pressurization systems when 
source pressure exceeds safe work- 
ing pressures of pressurized con- 
tainers. Require positive veri- 
fication of pressure application/, 
isolation valves positioning during 
application of test pressures 
through QC and/or supervisory 
checklists. 

Require installation of pressure 
relief devices on all pressure 
gages and at other critical loca- 
tions in test pressure systems. 
Require installation of pressure 
gages in maintenance/test set-ups 
to indicate applied pressures at 
work stations. Require installa- 
tion of safety lenses on test bench 
pressure gages. Placard test 
pressure systems for operation 
by authorized personnel only. 
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133 . 
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Acc 1 dent/lnc 1 dent 
Description 


A helium cylinder located 
in a K-bottle facility 
storage rack suddenly 
burst and released all of 
its contents as a result 
of a ruptured disc in the 
valve assembly. 

During operational test and 
checkout of a spacecraft, a 
■water glycol quick-disconnect 
(QD) was mated to the wrong 
port. There was no damage 
since the system was not 
pressurized. The spacecraft 
was tested for contamination 
and the flight half of the 
QD was changed. 


Causes 


Inadequate storage proce- 
dures in that the K-bottle 
storage rack was located 
under a translucent sheet 
roof which allowed sun's 
rays to overheat/over- 
pressurize the cylinders. 

Inadequate procedures due 
to the lack of warning notes 
in test and hook-up checklist. 
Contributing was inadequate 
design in that the QD con- 
figuration was such that it 
could be mated to a wrong 
port. 


Recommended 

Preventive/Corrective 

Action 


Ensure K-bottle storage proce- 
dures require sheltered storage 
to protect bottles from over- 
pressurization from heat sources. 


Provide warning notes in pro- 
cedures and checklists where it 
is possible to make wrong connec- 
tions. Require OC verification 
of all flight systems test set- 
ups. Ensure that adjacent connec- 
tors are properly coded, marked, 
or sized to avoid mismating. 
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Ac c i dent/Inc i dent 
Description 


During run-in of a high 
pressure air compressor 
used for laboratory test- 
ing of flight hardware, the 
fifth stage oil separator 
of the compressor exploded, 
due to autogenous ignition 
of an oil/air mixture in 
the exit pipe, propelling 
.fragments of the separator 
throughout the building 
and through the walls and 
roof. Mo one was injured. 


Causes 


Deficient design of air 
compressor system in that 
automatic cut-off tempera- 
ture sensors were so located 
that they could not detect 
the temperature of the dis- 
charged air at the area of 
the explosion. The temper- 
ature approached 400° F under 
run-in conditions, the 
approximate autogeneous 
point of the mineral based 
lubricating oil used in 
the compressor system 
under maximum stage dis- 
charge pressure. 


Recommended 

Preventive/Corrective 

Action 


Require hazard analyses to be 
performed on laboratory/ 
facility oressure equipment 
which is used with flight hard 
ware prior to operations and 
require safety approval. Spec 
fy use of synthetic lubricants 
in place of mineral base oils 
when potential operating tem- 
peratures may exceed 350°F. 
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Acc i dent/Inc 1 dent 
Description 


During preparation for an 
underwater test in a test 
facility, a sealed battery 
box containing two lead- 
acid batteries was being 
pressurized to approximately 
10 psi from a 110 psi source 
when the box blew up due to 
overpressurization , resulting 
in battery breakage. There 
■was no personnel injury or 
unacceptable tank contami- 
nation. 


Causes 


Inadequate design of pressure 
source system in that tnere 
was no pressure regulating or 
relief device between the 
110 psi supply and the connec- 
tion to the battery box. Con- 
tributing was management 
failure to implement formal 
design control of the battery 
box in that the box was a 
"locally fabricated item" 
with no identification of 
safe working pressures. 

Also contributing was a pro- 
cedural error in that, al- 
though the box was equipped 
with a shut-off valve and a 
gage, the valve was either 
open when the 110 psi source 
was connected or it was 
opened too fast during 
pressurization. 


Recommended 
Prevent i ve/Cor re c 1 1 ve 
Action 


Require installation of pressure 
regulators and automatic relief 
devices in source lines when 
source pressures exceed safe 
working pressure of pressure re- 
ceivers in test pressurization 
systems. Require formal design 
control of all pressurized con- 
tainers used in tests. Label 
pressurized containers with safe 
working pressures and periodic 
proof pressure test requirements. 
Require the use of formal 
procedures/checklists for the 
proper sequencing of operations 
in pressure applications. 
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137. 


138. 


SECTION VII 
PRESSURE SYSTEMS 


Accident/incident 

Description 

During proof pressure test- 
ing of a coolant servicing 
unit, a flowmeter within 
the unit ruptured due to 
overpressure and showered 
glass fragments within 
the enclosed test area. 
There were no injuries 
or other damage. 


During operational test 
and checkout flow testing 
of a spacecraft reaction 
control system engine, 
pressurization of the 
system caused leakage in 
an oxidizer isolation 
valve, which went unob- 
served until the oxidizer 
propellant tanks were 
pressurized to 20 psig, 
approximately 44% of de- 
sign burst. There was 
no damage and no in- 
juries. 


Causes 

The test procedures required 
application of 460 psig 
pressure even though the 
flowmeter was rated for a 
safe maximum working press- 
ure of only 230 psig. 


Inadequate test procedures 
in that the procedures failed 
to sufficiently recognize the 
possibility of pressure leak- 
age through the oxidizer 
isolation valve and over- 
pressurization of the oxi- 
dizer tanks during the 
test sequence. 


Recommended 

Preventive/Corrective 

Action 


Require checklist verification 
that test pressure requirements 
are within safe operating limits 
of test equipment. Limit proof 
pressure tests to 1.5 times 
maximum safe working pressure 
of test equipment. Ensure that 
proof pressure requirements for 
an assembly are compatible with 
assembly components during de- 
velopment of test procedures. 

Identify all tests requiring 
pressure applications to flight 
systems as hazardous; require 
safety review/analysis of test 
procedures during their devel- 
opment, to ensure entry of re- 
quired caution and warning notes, 
and safe test sequencing. 
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SECTION VII 
PRESSURE SYSTEMS 


Accident/Incident 

Description 


Causes 


Recommended 

Preventive/Corrective 

Action 


139. During acceptance testing 
of an APS module, the 
module bellows assembly 
was permanently distorted 
due to the application of 
test pressure approximately 
130 psi above the maximum 
allowable. The bellows 
assembly had to be replaced. 


Personnel failure to pro- 
perly position valves as 
required by the test pro- 
cedure. Contributing 
was lack of requirements 
for positive verification 
and communication of 
correct positioning of 
valves during the test 
sequence. 


Designate flight hardware 
pressure testing operations as 
hazardous. Require safety re- 
view and analysis of such op- 
erations to identify potential 
hazards. Institute positive 
communication and verification 
procedures for all configuration 
changes required during test 
operations. Require a ’’dry run” 
to validate proposed pressure 
test procedures for critical 
flight hardware. 
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SECTION VTII 
PROPULSION SYSTEMS 


Ac c I dent/lnc i dent 
Description 

27. During a manufacturing 
check-valve verifica- 
tion leak test on a 
space vehicle propulsion 
system, a technician 
working on the vehicle, 
using a drill motor, 
slipped and nicked a 
fuel line which was 
under test. 


23. During cleanup of a minor 
fuel leak from a pressure 
regulator in a propulsion 
system valve box, several 
polypropylene felt clean- 
up pads were slightly 
charred. No damage or 
injuries resulted. 


Causes 


Inadequate work area control. 
The leak test was being per- 
formed in a limited access 
area and test procedures re- 
quired no work on the vehicle 
during test operations. Con- 
tributing was personnel error 
in use of the drill. 


Personnel error in that tech- 
nician failed to follow esta- 
blished procedures, since 
clean-up pads were not 
sufficiently water-dampened 
prior to being used to 
absorb fuel. 


Recommended 

Preventive/Corrective 

Action 


Require supervisory and QC 
verification of i*ork area 
clearance prior to initiation 
of test operations in limited 
access test areas. Ensure 
that using personnel are 
trained and instructed in 
the proper use and position- 
ing of drill motors in the 
vicinity of pressurized 
lines and tanks. 

Designate all fuel clean-up 
operations as hazardous. Re- 
quire all personnel involved 
in fuel clean-up to be trained 
and certified for their job. 
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SECTION VIII 
PROPULSION SYSTEMS 


Accident/incident 
De script Ion 


Causes 


29. During removal of engine 
from test stand after com- 
pletion of development 
test firings, three tech- 
nicians inhaled toxic 
aerozine-50 fuel vapors 
that had been entrapped in 
the engine and discharged 
at the engine connect 
point. 

30. While removing an engine 
LOX inlet duct during man- 
ufacturing assembly opera- 
tions,, water in the bellows 
convolutions poured into 
the LOX turbo pump, necessi- 
tating removal and recondi- 
tioning of the pump. 


Inadequate work control pro- 
cedures in that the techni- 
cians were not wearing pro- 
per protective clothing f.or 
this type activity in 
•which residual fuel and 
oxidizer vapors can be 
expected even after engine 
purging operations. 


Inadequate inspection since 
the weep holes of the inlet 
duct and the shroud of the 
pump bell housing had not 
been covered and sealed as 
required, thus the collar 
area of the inlet duct per- 
mitted water to remain 
trapped below weep holes 
of the duct. 



Recommended 

Preventive/Corrective 

Action 


Establish work control pro- 
cedures which define the proper 
protective clothing to be worn 
for removal of liquid propel- 
lant engines from test stands 
after they have been operated. 


Require use of checklists in 
performance of assembly in- 
spections to record and verify 
that all inspection steps have 
been carried out. 
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SECTION VIII 
PROPULSION SYSTEMS 


Accident/Incident 

Description 


Causes 


31. During installation of a 
spacecraft propulsion en- 
gine,, the railing of the 
engine stand pressed up 
against a fuel vent line 
and dented it. 


32. During instrument modi- 
fication work on a space- 
craft engine, a welding 
machine operator mis- 
interpreted a voice 
communication from the 
interstage area and 
applied power to the 
tube welding head while 
it was in contact with 
the engine work plat- 
form, shorting the head 
to the platform. No 
damage to the engine; 
however, the potential 
existed. 


Procedural deficiency in 
that there was failure, to 
communicate essential in- 
formation concerning change 
in engine configuration to 
installation personnel; 
this particular engine had 
its fuel ventline routed 
5 inches lower than in pre- 
vious engines, and the 
pneumatic- tired stand 
raised up when part of 
working load was removed. 

Inadequate work control in 
that there was a failure to 
provide adequate communica- 
tions between the interstage 
and the welding operator. 


Recommended 

Preventive/Corrective 

Action 


Ensure that installation/test 
procedures used in conjunction 
with pneumatic -tired work 
stands provide cautionary warn- 
ings to make allowances in 
stands’, height due to load. 


Require hardline voice/visual 
commmications among welding 
team members on flight sys- 
tems. Require review of com- 
munication techniques prior 
to start of welding operations. 
Require safety approval of 
welding setup. Ensure that 
welding machine operators and 
technicians are certified and 
instructed in procedural com- 
munication techniques. 



SECTION VIII 
PROPULSION SYSTEMS 


Accident/incident 

Description 


3 3. During removal and re- 
placement of booster 
engine LH ? prevalves, 
a prevalve spacer was 
scratched in three 
places. 

3^. During helium system 
leak test pre-static 
engine checkout at an 
assembly facility, a 
growing bubble leak 
was detected at the 
mating flanges of the 
heat exchanger helium 
supply duct and the 
helium supply wrap 
around duct, resulting 
in replacement of the 
seal. 

35 . During maintenance in- 
stallation of a replace- 
ment O-ring on an engine 
igniter fuel line, four 
O-rings were found creased 
in their package, result- 
ing in rejection for use. 


Causes 


Inadequate maintenance and 
installation procedures. Con- 
tributing causes were inade- 
quate supervision and per- 
sonnel error. 


Personnel failure tc follow 
established installation 
procedures/techniques In that 
80 degrees of the seal's 
teflon coating had been peel- 
ed off as a result of improper 
installation. 


Inadequat e/improper 
packaging since procedures 
called for the O-rings to be 
packed so that they would 
remain in their natural 
shape. Contributing was in- 
adequate inspection of 
packaged products. 


Recommended 
Preventive/Corrective 
Action 


Require that all personnel 
be certified for work on 
flight hardware and require 
that specific installation 
procedures are prepared 
and followed. 

Reqj ire that critical 
component installation 
procedures be understood 
and that personnel are 
trained and certified to 
perform such operations. 
Ensure that inspection 
procedures and checklists 
provide for specific check- 
offs, as appropriate, during 
installation of critical 
components on flight 
hardware . 

Ensure that packaging and 
packaging inspection 
personnel are trained and 
certified in proper 
packaging techniques; and 
the use of approved 
packaging procedures. 
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Accident/incident 

Description 


During manufacturing 
checkout leak test of 
an engine hydraulic 
system, the braided 
flex hose connected 
to the gimbal filter 
manifold supply 
pressure tap leaked at 
a severely "damaged 
area resulting in re- 
placement of the hose. 

During engine develop- 
ment testing a circuit 
malfunction in the 
facility cutout system 
led to premature engine 
cut-off. No damage. 


SECTION VIII 
PROPULSION SYSTEMS 


Causes 


Inadequate pre-test in- 
spection procedures in that 
the failed hose was in an 
incipient failure condition, 
that could have been detect- 
ed by visual Inspection 
(damaged braid and permanent 
bulge set ) . 


Personnel error. The thrust 
chamber exit igniter Indica- 
tion device was Inadvertently 
wired Into the cutout system, 
there was no evidence that 
test wire connections had 
been inspected. 


Recommended 

Preventive/Corrective 

Action 


Require formal QC Inspection 
and verification of 
test pressure set-ups 
before application of test 
pressures to or around 
program essential equip- 
ment . 


Require formal QC inspec- 
tion and verification of 
test wiring connections 
prior to application of 
power to program essential 
equipment . 



Accident/incident 


Description 


38. An engine injector be- 
came contaminated with 
rain water while in its 
storage container in a 
storage warehouse due to 
a leak in the building 
roof and lack of cover 
on the storage container. 


39. During a flight engine 
pre-stage checkout 
inspection following 
removal from storage, it 
was discovered that 
there was minor damage 
to the thrust chamber 
tubes, requiring repair. 
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SECTION VIII 
PROPULSION SYSTEMS 


Causes 

Personnel error in that 
the storage container cover 
had been removed to inspect 
the condition of the con- 
tainer dessicant and had 
not been replaced. Contribut- 
ing was a management deficien- 
cy in that there was a 
failure to have proper building 
inspection to detect roofing 
deterioration. 


Inadequate storage 
inspection procedures since 
the .protective engine cover 
had not been Installed, and 
the stage was damaged when 
struck by some sharp object. 


Recommended 
Preventive/Corrective 
Action 

Ensure that program hard- 
ware inspection procedures 
require Immediate replace- 
ment of protective coverings 
when inspection is completed; 
require use of "buddy 
system" and checklist 
verification when inspec- 
tions are performed in 
isolated areas. Require 
pre-storage inspection of 
storage facilities for 
program essential equip- 
ment to ensure they will 
provide the required pro- 
tection; and perform . 

periodic (at least quarterly) 
Inspection and corrective 
maintenance. 

Require formal procedures 
and checklists to verify 
Installation of protective 
covers on flight hardware 
placed In storage. 


Acc i dent/lnc i dent 
Description 

During a leak check 
procedure on a space- 
craft propulsion 
system during assembly 
operation, the over- 
head workstand was 
moved while a propul- 
sion flex line was 
still attached to 
it, causing damage to 
a line connector 
and mounting bracket. 

During installation of 
a tube assembly on a 
spacecraft engine, a 
tube weld purge could 
not be accomplished. 
Inspection revealed a 
piece of plastic film 
plugging the tube pass- 
age. 


SECTION VIII 
PROPULSION SYSTEMS 


Causes 


Inadequate work control 
In that the workstand was 
not cleared of flexline 
connections before being 
moved. Contributing was 
personnel error since the 
Incident was partly due 
to carelessness during the 
test procedures. 


Deficient inspection pro- 
cedures governing process- 
ing of plugged tube from 
manufacturer to point of 
installation, in that plas- 
tic film was used to protect 
tube ends, and its presence 
in the tube was undetected 
in its process through an 
undetermined number of 
ahipping^receiving points; 
there were no procedures 
to verify the internal 
cleanliness of the tube 
immediately prior to in- 
stallation . 


Recommended 

Preventive/Corrective 

Action 


Use formal procedures 
and checklists during 
assembly/test of flight 
systems to verify completion 
of all operations prior 
to movement of workstands. 


Require formal QC inspection/ 
verification of cleanliness 
of internal tube/piping areas 
immediately prior to installa- 
tion in flight systems. 
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SECTION IX 
STRUCTURAL SYSTEMS 


Accident/incident 

Description 


Causes 


21. Following removal of a 
protective hard-floor 
covering during manufact- 
ure of a flight module, 
the module floor was 
found to have a one and 

a half inch long tri- 
angular puncture. 

22. During weight and balance 
testing of a spacecraft 

in a manufacturing facility, 
the turn buckle on the 
sling being hooked to the 
top of the craft contacted 
the craft and broke off a 
finger seal. 


Most probable cause was per- 
sonnel error in allowing 
the hinged hard floor 
supporting frame to fall 
against the module floor 
during either installation 
or removal. 


Inadequate work control since 
one leg of the sling was not 
pulled taut enough to prevent 
the sling from contacting and 
breaking off the finger seal. 
Contributing was failure to 
provide required protection 
for the finger seal. 


23. While performing work on 
top level platform of a 
spacecraft module, a 
torque wrench slipped 
from technician's hand, 
falling and striking aft 
bulkhead structure, 
causing a 1/16 inch nick. 


Inadequate work control pro- 
cedures in that there were 
no protective or restraining 
devices used to prevent a 
slipped wrench from falling. 


Recommended 
Prevent i ve/Corr e c t i ve 
Action 


Require training and certifi- 
cation of personnel involved 
in installation of protective 
flight module coverings. 


Require any in-plant movement 
of flight hardware to be under 
the direct supervision of a 
designated move conductor. 
Ensure that required protect- 
ive devices are used. 


Require the use -pf protective 
nets or restraining devices 
on tools being used on elevated 
work platforms. 
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SECTION IX 
STRUCTURAL SYSTEMS 


Accident/incident 

Description 

24. Daring the lifting of a 
launch vehicle section, 
a hold-down bolt in the 
aft support structure 
over- stressed the ve- 
hicle’s aft skirt 
section, resulting in 
minor damage. 

25. During manufacturing, a 
titanium propellant tank 
was undergoing final 
internal inspection by 
means of an X-ray anode 
tube which was left in- 
side the tank unattended. 
Overnight, a leak devel- 
oped at a hose connection 
in the X-ray tube cooling 
system which half-filled 
the tank with water, 
collapsing and totally 
destroying it. 


Causes 

Personnel error in that the 
bolt was not removed as re- 
quired prior to lifting. 
Contributing was improper 
inspection in that several 
inspection teams had certi- 
fied that all bolts were 
removed. 

Inadequate work procedures in 
that cooling system hoses were 
not checked for proper install- 
ation since a kinked hose 
caused a pressure buildup 
which resulted in the hose 
backing off the nipple. Con- 
tributing causes were a de- 
sign deficiency in using ad- 
hesive tape on hose connec- 
tions to restrain hose from 
pulling loose; and a manage- 
ment deficiency in that the 
tank manufacturer failed to 
follow instructions of the 
contractor to remove the X- 
ray tube from the tank when- 
ever it was to be left un- 
attended . 


Recommended 

Preventive/Corrective 

Action 


Ensure that inspection per- 
sonnel are qualified and certi- 
fied for their specific job* 
Ensure that hold-down bolt 
removal procedures and check- 
lists identify and require veri- 
fication of the number of bolts 
removed. 

Require that QC verify proper 
installation of test equipment 
used with critical hardware. 
Prohibit the use of test equip- 
ment which does not use mechani- 
cal hose clamps for all hose 
connections. Require use of a 
checklist to ensure correct 
procedures for shutdown of test/ 
inspection operations on program 
critical hardware. 



SECTION IX 
STRUCTURAL SYSTEMS 


Accident/Incident 

Description 


26. During countdown demon- 
stration test at a launch 
facility, the spacecraft 
boost protective cover 
(BPC) hatch latches did 
not retract prior to hatch 
closure, resulting in 
minor damage to BPC. 

27. While raising the hydraul- 
ic work platform around 
the spacecraft, the kick 
plate came in contact with 
the spacecraft tunnel, 
causing a 2 1T tear in the 
lower edge of the tunnel 
door. 

28. During manufacturing, a 
spacecraft side hatch was 
closed on and crushed a 
live portable light cord, 
resulting in arcing which 
burnt two small indentations 
on the hatch frame ledge. 


Causes 


Inadequate procedures in 
that test procedures did not 
call for verification, vis- 
ually or otherwise, that 
hatch latches were in open 
position. 


Inadequate supervision and 
work control in that a 
visual Inspection for de- 
termining adequate clear- 
ances for the platform was 
not made before and during 
the raising operation. 


Personnel error in that a 
technician failed to remove 
the light cord before closing 
the side hatch. 
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Recommended 

Preventive/Corrective 

Action 


Ensure that test procedures re- 
quire positive verification of 
positioned devices during test 
sequence. 


Require that two men always be 
assigned to raise or lower any 
v;orkstand; one man to operate 
the raising or lowering mech- 
anism, and one man to assure 
hardware clearance. 


Require supervisory or inspection 
approval prior to opening or 
closing spacecraft hatches. In- 
stall restraints on open hatch 
doors to prevent inadvertent 
closing. 
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SECTION IX 
STRUCTURAL SYSTEMS 


Accident/incident 

Description 


29. During manufacturing assembly 
operations, a stage tank was 
subjected to possible negative 
pressure differential and 
damage, due to failure to 
uncap the breather port of 
the tank desiccant canister 
following canister connect- 
ion to the tank. 

30. During the horizontal paint 
and rolling operation on a 
stage tank, a temporarily 
secured flange became loose 
and fell inside the forward 
skirt area, resulting in 
minor damage to mylar on 
forward dome and a small 
ding in a thermo-conditioning 
system line. 


Causes 


Inadequate work control pro- 
cedures since the canister 
was both disconnected and 
reconnected to the tank with- 
out documented authority or 
procedural instructions; as 
a result, the mechanic making 
the reconnection failed to 
uncap the breather port. 

Inadequate inspection proce- 
dures in that after the des- 
iccant system had been re- 
installed following tank 
pressurization for an engine 
leak check, the temporary 
flange was improperly stowed 
inside the tank. 


Recommended 

Preventive/Corrective 

Action 


Require the use of formal pro- 
cedures and checklists to attain 
and verify the proper configura- 
tion of flight equipm ent during 
all assembly operations. 


Require accountability for all 
equipment and tools upon the 
completion of specialized opera- 
tions involving flight hardware. 
Require inspection and certifi- 
cation when any item has been 
stowed temporarily on flight 
hardware. 



Accident/incident 

Description 


During test preparation, 
a control handle fell off 
an overhead hydraulic hoist 
and punctured a spacecraft 
bulkhead, allowing approxi- 
mately a gallon of hydraulic 
fluid to spill on the bulk- 
head and leak onto equipment 
inside. The long range 
effects of the fluid con- 
tamination are unknown. 

During manufacturing test 
preparation, the floor skin 
of a flight module was torn 
when a workman dropped one 
end of a crew couch. 


SECTION IX 
STRUCTURAL SYSTEMS 


Causes 


Personnel error in that 
the hoist passed receiving 
inspection with an improperly 
installed control handle set 
screw. Contributing was lack 
of procedures requiring 
special inspection of flight 
hardware handling/lifting 
equipment prior to use. 


Inadequate work control. The 
workman was not experienced 
or qualified and had not been 
assigned to the job. Con- 
tributing was failure to follow 
required procedures since pro- 
tective floor pads were not in 
place. 


Recommended 

Preventive/Corrective 

Action 


Require QC receiving inspection 
check of control handles in- 
stallation on all handling/ 
lifting equipment. Require 
local QC inspection and veri- 
fication of all handling/ 
lifting equipment used with 
flight hardware prior to use. 


Designate all transport and 
handling operations involving 
flight equipment as safety cri- 
tical and train and certify per- 
sonnel for their job. Ensure 
that only certified personnel 
participate in safety critical 
handling operations. Require 
QC verification that protective 
pads are in place prior to moving 
heavy items inside flight vehicles. 
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Accident/incident 

Description 


33. While machining foam in- 
sulation during SbO^repair of 
a spacecraft forward skirt 

at a manufacturing facility, 
the rotating aluminum shaft 
of the machining tool sheared 
at the base of the phenolic 
cutting head. The cutting 
head hit and damaged the in- 
sulation. 

34. During manufacturing opera- 
tions involving the removal 
of a bonded support bracket 
from the forward dome of a 
spacecraft, the dome skin 
was dented in three places. 
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SECTION IX 
STRUCTURAL SYSTEMS 


Causes 


Deficient work planning in 
that the machining tool 
(aluminum shaft) selected 
was inadequate for the 
assigned work. 


Personnel error in that there 
was failure to follow esta- 
blished procedures when using 
a plastic scraper to separate 
the bond between the support 
bracket and the forward dome. 


Recommended 

Preventive/Corrective 

Action 


Avoid the use of aluminum shafts 
in machining tools. Require 
engineering design review of 
machining tools procurement 
specifications to ensure their 
adequacy for use with program 
essential hardware. 


Require that employees be in- 
structed on proper procedures 
for removing bonded items from 
critical flight hardware. Assure 
that the proper hand tools are 
available for employees' use when 
removing bonded articles from 
flight hardware. 



SECTION IX 
STRUCTURAL SYSTEMS 


Accident/incident 

Description 


35. During manufacturing, a 
titanium propellant tank 
loaded on an automatic con- 
veyor was damaged beyond 
repair when it jammed into 
a partially open heat-treat 
oven door due to failure of 
the door lifting mechanism. 


Causes 


Deficient design of the heat- 
treat system in that there 
was no provision for auto- 
matic shut-down of the con- 
veyor if the oven door failed 
to less than required open 
position. Contributing was 
deficient work procedures 
since the door mechanism 
was in an incipient failure 
condition which could- have . 
been detected prior to start 
of heat-treat operations. 


Recommended 

Preventive/Corrective 

Action 


Designate all automatic feed 
operations for flight hardware 
safety critical. Require safety 
analysis/review of feed systems 
designs to ensure incorporation 
of fail-safe features. Ensure 
operating procedures require 
visual/functional check of 
proper systems operatiors prior 
to start of loading 
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SECTION X 

TRANSPORT/HANDLI NO 


Accident/Incident 

Description 


Causes 


53. During highway transport 
of critical program equip- 
ment a tractor-trailer 
interior caught fire 
approximately 5 hours 
after it was loaded. The 
local fire department ex- 
tinguished the minor 
blaze. The driver con- 
tinued and 1% hours later 
the fire recurred, com- 
pletely destroying the 
critical equipment. Des- 
truction and damage 
amounted to over $800,000. 

54. While towing a vertical en- 
gine installer to its stor- 
age location at a launch 
facility a crack developed 
in the installer draw-bar 
assembly at an area of pre- 
vious repairs. 


Failure to enforce no 
smoking policies around 
packing and shipping areas 
and materials. Contribut- 
ing causes were failure to 
inspect loading of high 
value equipment, careless- 
ness of loading personnel, 
and failure to properly 
extinguish initial trailer 
fire. 


Personnel error in that 
proper towing vehicle op- 
erating procedures were 
not followed. Contribut- 
ing was inadequate main- 
tenance procedures in 
that multiple repair of the 
failed area had been 
made, in lieu of part 
replacement, which 
weakened the failed part. 


Recommended 

Preventive/Corrective 

Action 


Publicize and enforce no smoking 
regulations in packing, shipping, 
and receiving areas. 


Designate handling and transport 
of essential GSE as> safety critical 
operations; require training aid 
certification of handling per- 
sonnel. Bisure that essential 
GSE parts replacement policies 
prevent multiple failure repair 
of the same part. 
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Accident/incident 

Description 


55. During preparations for ship- 
ment of a propellant tank 
from the manufacturer a heat 
lamp was tipped against the 
outer tank wrapping and 
started a fire causing 
minor damage to the tank. 

56. During maintenance work on 
a main stage crawler trans- 
porter, three hydraulic 
steering pistons and re- 
lated cylinders were sev- 
erely damaged when the 
transporter platform was 
lowered. 


SECTION X 

TRANSPORT/HANDLING 


Causes 

Procedural in that heat 
lamps, though not actually 
required, were used near 
flammable materials with- 
out proper protective 
devices to prevent igni- 
tion. 

Inadequate work control 
in that there was no over- 
all supervision or positive 
c annum ic at ion during main- 
tenance operations. Con- 
tributing were personnel 
error since the required 
inspection to verify open 
position of manually op- 
erated isolation valves 
was not performed prior 
to platform lowering, and 
a design deficiency in that 
there was no hydraulic 
over-pressure warning or 
relief system. 


Recommended 
Preventive/Corrective 
Action 

Require that all heat lamps 
used in presence of flanvnable 
materials be equipped with 
protective devices, and be 
specifically certified for 
use in each operation. 

Designate all maintenance and 
check-out operations on fl igh t 
hardware transporter equipment 
as hazardous and certify per- 
sonnel for such operations. 
Ensure that all maintenance 
operations on such equipment 
are controlled by one overall 
supervisor. Require the use 
of checklists and/or procedures 
during maintenance operations. 
Equip all hydraulic sub-systems 
capable of inadvertent over- 
pressurization with relief 
valves or warning devices. 
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Accident/incident 


Description 


57. During removal of an empty 
tank car, a helium rail 
car was mistakenly moved 
while a pressurized hose 
was still connected be- 
tween the car and the 
off-load facility mani- 
fold, resulting in damage 
to the flex hose and 
bleed panel. 


58. A commercial tractor- 

trailer van hauling a NASA- 
owned computer system 
skidded off the highway 
into an embankment. The 
trailer jackknifed, causing 
damage to various computer 
parts. The driver received 
minor injuries. 


SECTION X 

TRANSPORT/HANDLI NG 


Causes 


Inadequate work control in 
that the car was moved with- 
out first being checked for 
connected lines; failure 
of the off-loading crew to 
set legally required warn- 
ing flags, and failure to 
verify the identity of the 
ear before moving it. Con- 
tributing was poor visi- 
bility due to night-time 
conditions. 

Material failure in that an 
apparently good front tire 
of the tractor blew out 
under ideal highway and 
weather conditions. Con- 
tributing were personnel 
error in that the driver 
failed to control the ve- 
hicle after the blowout 
occurred, and inadequate 
procedures in that there 
was no evidence that ve- 
hicle condition or driver 
qualification had been 
determined before depart- 
ure. 


Recommended 
Preventive/Corrective 
Action 

Designate propellant off- 
loading operations as hazard- 
ous and certify off-load 
crews. Require safety 
approval of off-loading 
operations prior to commence- 
ment. Require use of a 
checklist and/or procedures 
to ensure correct railcar 
identification and that all 
disconnects have been made 
prior to movement. 

Designate highway transporta- 
tion of high value/program 
critical equipment as safety 
critical. Require certifica- 
tion of drivers and inspection 
of highway vehicles hauling 
critical equipment prior to 
departure. 



SECTION X 

TRANSPORT/HANDLING 


Accident/incident 

Description 

During shipment of a number 
of space system batteries 
via common carrier trailer 
truck from the manufacturer 
plant to the launch center, 
the batteries were damaged 
beyond use due to exposure 
to excessive heat brought 
about by failure of the 
trailer temperature condi- 
tioning system and failure 
of an independent tempera- 
ture gage/sensor assembly. 


During manufacturing check- 
out a wheeled leak detector 
was damaged while being 
loaded on to skid, when a 
wheel broke off causing 
unit to fall backwards to 
the pavement. 


Causes 


Inadequate transportation 
planning in that there were 
no procedures to verify the 
proper operation of the con- 
ditioning system and its 
temperature gage system prior 
to battery loading; there 
were no procedures to ensure 
adequacy of emergency actions 
to be taken on noticing the 
failure of the temperature 
gage/sensor assembly (the 
conditioning unit was heard 
to be running and it was 
assumed it was in the "cool" 
mode when it had actually 
failed into the "heat" mode 
due to a short circuit in 
the thermostat assembly) . 

Material failure. The 
wheel broke off at a weld. 
Contributing was possible 
overstressing of the wheel/ 
weld due to rough handling. 


Recommended 
Prevent ive/Corrective 
Action 


Require verification by author- 
ized supplier and a government 
representative of proper oper- 
ation of essential trailer 
truck conditioning systems 
prior to loading program essen- 
tial equipment for transport. 
Require safety/reliability re- 
view of essential trailer truck 
conditioning systems to esta- 
blish compatibility between 
emergency enroute procedures 
and failure modes of condition- 
ing equipment, prior to shipment 
of program equipment. 


Require training and certifica- 
tion of all personnel involved 
in handling/moving of essential 
hardware. Require regular 
maintenance inspection of wheel 
assemblies on trolley mounted 
high value/critical test and 
support equipment. Affix hand- 
ling warning notices to critical 
portable equipment and ensure 
its movement only by certified 
personnel. 
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SECTION X 
TRANSPORT/HANDLI NO 


Ac c 1 dent/lnc 1 de nt 


Description 


61. While removing a spacecraft 
control unit from the mobile 
launcher to the high bay 
during the pre-launch check- 
out, three calibration test 
point connections were 
broken. 


62. While equipment was being 
unloaded from a cart on 
the 120-foot level of a 
mobile launcher, a test 
box fell to the "0” level 
and was totally demolished. 
No other danage or per- 
sonnel injuries occurred. 


Causes 

Personnel error since 
control unit was moved 
without protective pads 
or cases, in violation 
of established procedures. 


Personnel error in over- 
loading the cart, inter- 
mingling flex hose with 
other apparatus, and un- 
loading cart while too 
close to the edge. 


Recommended 
Preventive/Corrective 
Action 

Require QC inspection and veri- 
fication of proper packaging/ 
protection of high value test 
equipment prior to movement. 


Establish procedures and con- 
trols to prevent over-loading 
and hazardous handling of 
carts. Require that personnel 
handling movable carts around 
and on launch support struct- 
ures be properly trained and 
certified for their jobs. Pro- 
vide protective side barriers 
or nets on carts. Require cart 
loads to be secured by nets or 
other arresting methods before 
being moved across catwalks. 
Specify ana enforce safe load 
limits for equipment carts. 
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Accident/incident 

Description 

63. . During the moving of test 
equipment on a cart across 
a catwalk, a 5-lb. test box 
fell from the cart over 100 f 
to a lower level and was 
demolished. No personnel 
injuries or other equipment 
damage resulted. 


64. During facility modifica- 
tion, a 190-lb. steel heat 
shield panel was being 
hoisted by .an overhead 
crane when the handling 
tool attached to the panel 
failed and the panel fell - 
against a space vehicle 
engine, damaging 4 lines 
beyond repair. 
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SECTION X 
TR AN SPO RT/HANDLI NO 


Causes 


Recommended 

Preventive/Corrective 

Action 


Personnel error in that 
the cart was overloaded 
with loose, unsecured 
equipment. Contributing 
were failure to exercise 
proper supervision and 
to provide side fencing 
or netting on catwalk. 


Procedural error in that 
a handling tool not de- 
signed for the specific 
job was used. There was 
no tool for lifting the 
steel panel so one used ' 
for lighter ceramic panels 
was utilized. Contribut- 
ing causes were failure to 
provide formal authoriza- 
tion of lifting tool sub- 
stitution, failure to 
provide instructions on 
lifting tool limitations, 
failure to require safety 
inspection of the lift 
rigging, and failure to 
provide support for the 
shield while taking up 
cable slack. 


Establish procedures and con- 
trols to prevent over-loading 
and hazardous handling of 
carts. Require that personnel 
handling movable carts around 
and on launch support struct- 
ures be properly trained and 
certified for their jobs. Pro- 
vide protective side barriers 
or nets on carts. Require cart 
loads to be secured by nets or 
other arresting methods before 
being moved across catwalks. 
Specify and enforce safe load 
limits for equipment carts. 

Require safety approval and - 
surveillance of facility modi- 
fication hoisting operations in 
vicinity of flight systems; re- 
quire inspection of all rigging 
prior to use. Establish pro- 
cedures which restrict tool use 
to the job for which designed . 
and require formal approval of 
any substitution. Require list- 
ing of proper tool use and any 
limitations on tool drawings, 
and ensure that personnel engaged - 
in critical lifting operations 
are aware of this information. 



SECTION X 

TRANSPORT/HANDLING 


Accident/Incident 

Description 


65. Two workmen inhaled toxic 
fumes generated by 
smouldering containers 

of oil, acid and solvent 
which spontaneously ig- 
nited at a test facility 
dump, due to incompati- 
bility between materials 
being dumped. 

66. During local truck trans- 
port of a spacecraft cap- 
sule at a Center, the 
capsule caught on and 
broke a fire alarm com- 
munications cable over 
the roadway, resulting in 
minor damage to 5 private 
vehicles parked nearby. 
Negligible damage to the 
capsule. 


Causes 


Inadequate work planning 
and procedures in that the 
disposal operations did not 
provide for the identifica- 
tion and segregation of 
potentially hazardous ma- 
terial combinations. 


Inadequate transportation 
planning in that overhead 
clearances along the route 
were not verified before- 
hand. 


Recommended 

Preventive/Corrective 

Action 


Require identification and 
segregation of hazardous ma- 
terials combinations in plan- 
ning disposal procedures. En- 
sure that disposal personnel 
are adequately briefed on the 
potential hazards of waste 
materials and on the necessity 
for wearing protective gear. 

Require route inspection and 
verification of adequate over- 
head road clearance in planning 
transport of flight equipment. 



SECTION X 

TRANSPORT/HANDLING 


Accident/incident 

Description 


During airport ground 
handling operations, a 
crated, pallet mounted, 
spacecraft oxygen tank 
being shipped from the 
manufacturer slipped 
off a transporter and 
fell 3 feet to the ground. 
There was no damage to 
the tank and only minor 
damage to the reusable 
container. 

While a workstand section 
was being moved during 
assembly of a spacecraft 
module, a wheel on the 
workstand caught on a 
floor joint, causing the 
workstand to pivot and 
strike the module propul- 
sion system radiator. 


Causes 


Personnel error in that the 
transporter operator had 
installed only 2 of 6 chocks 
designed to prevent load 
slippage. Contributing was 
failure to mark the container 
as critical flight hardware 
and failure to notify the 
shipper of the critical 
nature of the cargo. 


Inadequate work control in 
that the workstand was being 
moved with the help of an 
electric work saver and there 
were no restraints employed 
to prevent erratic movement 
of the workstand. 


Recommended 

Preventive/Corrective 

Action 


Clearly mark all shipments of 
critical flight hardware as 
flight critical an the con- 
tainer and include special 
handling instructions. lei- 
sure that shippers are notified 
of flight critical shipments. 


Prohibit use of assisting equip- 
ment which cannot be controlled 
with required precision. Require 
strategic placement of adequate 
restraints to prevent erratic 
movement of workstands during 
their movement around flight 
hardware. 


SECTION X 
TRANSPORT/HANDLING 


Accident/Incident 

Description 


69. While moving a spacecraft 
module control unit, a 
forklift went over a bump; 
unit bounced, breaking the 
pallet and fell 2-3 feet 
to the pavement, then 
rolled 5 feet in front of 
the forklift, resulting 

in damage to the unit. 

70. During off-loading of a 
crated vehicle stage helium 
ambient sphere by forklift 
from a truck, the sphere 
crate was dropped due to 
imbalance and insecurity on 
the forklift, resulting in 
loss of the sphere for pro- 
duction use. 


Causes 


Inadequate work control in 
that the movement of the 
unit was undertaken without 
proper securing to .the 
pallet sind forklift. 


Personnel error in that the 
operator apparently misjudged 
the balance of the crate as 
it was being lifted and possi- 
bly did not use long enough 
forks. Contributing causes 
were failure to use straps 
or restraining devices while 
handling flight critical 
hardware, failure to clearly 
mark the shipment as critical 
hardware and to inform the 
shipper, and failure to 
properly supervise unload- 
ing of critical equipment. 


Recommended 
Prevent 1 ve/Cor re c t i ve 
Action 


Require that forklift trans- 
port procedures on critical/ 
high value spacecraft hard- 
ware include the equipment 
for tie-down before movement. 
Require all forklift opera- 
tors handling such items to 
be certified. 


Ensure that all critical pro- 
gram hardware shipments are 
clearly marked on the crate as 
critical equipment. Require 
crated critical equipment to 
be clearly marked with CG loca- 
tions and lifting points. Re- 
quire personnel involved in 
handling critical equipment to 
be trained and certified for 
their job. Ensure adequacy of 
supervisory control during fork- 
lift handling of critical equip- 
ment to ensure use of correct 
fork lengths and attention to 
load balance. 



Accident/incident 

Description 


71. During installation of an 
ascent stage in a work- 
stand, one of four hydraulic 
lifting jacks failed due to 
hydraulic leak allowing the 
corner of the stage to drop 
approximately one inch. 

There were no personnel 
injuries or flight equip- 
ment damage. 


72. While transporting 4 drums 

on a pallet in a manufactur- 
ing receiving area, a fork- 
lift struck and broke one 
corner of a fiberglass con- 
tainer placed in the passage- 
way and slightly damaged 
spacecraft Control and 
Display panel inside. There 
were no injuries. 
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SECTION X 

TRANSPORT/HANDLING 


Causes 

Procedural deficiency in 
the selection of the jacks 
used in that they were 
prone to sudden failure 
due to hydraulic leak. 
Contributing was inade- 
quate work control in 
that the procedural re- 
quirement to position the 
jack ram locking ring to 
limit any stage drop to 
1/8 inch was not complied 
with. 


Deficient receiving area 
procedures which failed to 
provide for adequate pro- 
tection of in-transit pro- 
gram essential equipment. 


Recommended 
Preventive/Corrective 
Action 

Prohibit use of marginal/ 
def ic ient handl ing/pos it ion ing 
gear in movement of essential 
program equipment. Identify 
such gear as safety critical 
and establish formal design/ 
engineering control for pro- 
curement and selection. Re- 
quire supervisory review of 
handling/positioning procedures 
with handling team prior to 
movement of essential equipment; 
maintain supervisory control 
during movement operation. 

Require periodic (at least 
quarterly) safety reviews/ 
surveillance of receiving 
area/warehouse procedures and 
activities to ensure segrega- 
tion of fragile material not 
requiring mechanized handling 
equipment from heavy bulky 
material; to ensure adequate 
passageways are provided for 
transit of handling equipment. 
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Accident/incident 

Description 


73. While lifting a spacecraft 
hydraulic accumulator from 
its shipping container, the 
heavy end slipped from the 
mechanic's grasp and fell 
6 to 8 inches, damaging an 
electrical connector attached 
to a potentiometer within 
the reservoir. 


74. During a helium transfer 

operation, the truck driver 
attempted to move the tube 
trailer, while it was still 
connected to the supply sys- 
tem, resulting in damage to 
the high pressure flex hose, 
the system manifold, the line 
leading away from the parking 
area, and the trailer dis- 
charge manifold. 


SO 


I 


SECTION X 
TRANSPORT/HANDLING 


Causes 

Personnel error due to im- 
proper handling. Contribu- 
ting was failure by super- 
vision to determine the 
adequacy of methods and 
protection being used while 
removing the accumulator 
from its shipping container. 


Inadequate work control in 
that the trailer was re- 
connected to the system 
for leak checks, after it 
was called to be moved by 
the test support crew, and 
the driver on arrival was 
not so informed. Contri- 
buting was personnel error 
since the driver did not 
visually determine that 
trailer was disconnected. 


Recommended 
Preventive/Corrective 
Action 

Require that unpacking pro- 
cedures for items of flight 
hardware and components in- 
clude a. step for supervision/ 
inspection determination as 
to the need for use of any 
special handling or protect- 
ive measures, prior to pro- 
ceeding with unpacking opera- 
tions. 

Require that warning or caution 
signs/flags be placed on front 
and rear of trailers while 
connected to a transfer mani- 
fold, and permit removal only 
after the joint inspection by 
both the truck driver and 
the supervisor of the supply 
system. 
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SECTION X 

transport/handlinq 


Accident/incident 

Description 

75. While slow towing a helium 
rail car, a trackmobile de- 
railed, damaging a mechani- 
cal track switch and sus- 
taining minor structural 
damage. The switch had to 
be replaced. 


76. During installation of port- 
able clean rooms in a test 
tower, a hoist cable caught 
the reflector of a fluores- 
cent light fixture, pulling 
loose the reflector and two 
48- inch lamps. The lamps 
broke, scattering glass on 
a space vehicle. There was 
potential for mercury con- 
tamination of the vehicle. 


Causes 

Inadequate design of the con' 
trol levers since all three 
were the same color, only 
lk n apart, and were not 
equipped with a positive 
safety lock to prevent in- 
advertent movement . Con- 
tributing was personnel 
error in that the rubber 
wheels were placed in the 
"down" position erroneously, 
thereby disengaging the 
flanged track wheels. 

Failure to follow required 
procedures in that workmen 
did not adequately monitor 
cable clearance during op- 
erations. Contributing 
was failure to provide pro- 
tection for the space ve- 
hicle during hoisting op- 
erations. 




Recommended 

Preventive/Corrective 

Action 


Require human factors/safety 
review/analysis of manual 
control systems designs during 
their development to ensure 
man/machine compatibility; 
provide safety locks on manual 
control levers. Require train- 
ing and certification of trans- 
port/handling personnel. 


Designate all hoisting and low- 
ering operations near flight 
systems as safety critical and 
require safety inspection of 
rigging and system protection 
prior to commencing operations. . 
Ensure that safety training and 
awareness programs positively 
emphasize the critical nature 
of hoisting/handling operations 
on or near flight hardware. 
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SECTION X 

TRANSPORT/HANDLINO 


Accident/Incident 

Description 


77. During inspection of an 
instrumentation flight 
module after removal from 
storage, two indentations 
in the exterior structure 
were found. The damage 
was minor. 


78. During stage rotation from 
vertical to horizontal 
position in preparation 
for shipment from the manu- 
facturing facility, the 
protective cover of the 
stage feed line contacted 
the upper structure of a 
nearby forklift, resulting 
in minor damage to the 
cover. 


Causes 


Improper storage and handling 
techniques in that the module 
was apparently stored with in- 
sufficient clearance between 
the unit and the storage sta- 
tion post, which caused a 
gather in the dust cover to 
be pressed into the side of 
the unit. Contributing was 
personnel error in not ex- 
ercising due care in storage 
operations. 

Inadequate work control in that 
sufficient clearance for the 
stage rotation path was not 
established prior to movement. 


Re c emended 
Preventive/Corrective 
Action 


Require formal storage pro- 
cedures and specifications 
for critical end items. Re- 
quire QC inspection to ensure 
that critical end items are 
stored in accordance with 
specif icat ions . 


Ensure that move conductors ex- 
ercise rigid control of area 
operations during movement/ 
repositioning of flight ve- 
hicles. Require barricad- 
ing placarding of area opera- 
tions prior to start of move. 



SECTION X 

transport/handling 


Accident/incident 

Description 


Causes 


During transporter move- 
ment of spacecraft sub- 
assemblies within a plant, 
the transporter struck the 
top of a doorway, causing 
minor damage to the sub- 
assemblies. 


During removal of b dyna- 
mic test article from 
manufacturing checkout 
facility building, the 
mobile crane handling the 
aft end of the unit was 
overloaded, causing the 
front (tractor) end of 
the crane to rise off the 
ground and permitting 
several feet of uncontrolled 
movement of the flight unit. 
No damage or personnel in- 
juries occurred. However, 
accident/injury potential 
was high. 


Personnel error in that the 
driver did not make a visual 
check prior to driving 
through the doorway. 


Inadequate functional veri- 
fication procedures for 
verifying the safe opera- 
tion of the crane, which 
failed to consider the 
effect of motion on the 
crane’s carrying capacity. 
Verification under load had 
been performed only under 
stationary conditions. 


Recommended 

Preventive/Corrective 

Action 


Require full stop visual check 
for adequate clearance when 
moving flight hardware and pro- 
gram equipment through doorways. 
Provide clearance caution and 
warning placards on doors and 
exits used by plant transport 
vehicles. 

Ensure that procedures for all 
moving of critical flight hard- 
ware include requirements for 
pre-use functional certification 
of transporting equipment both 
under load and motion conditions. 
Require periodic review and cer- 
tification of preparation and 
readiness procedures associated 
with "critical move” operations. 


SECTION X 

TRANSPORT/HANDLINO 


Accident/Incident 

Description 


During receiving inspect- 
ion at a NASA Center, a 
mission module was found 
to have a high level of 
radiological contamina- 
tion. Although no damage 
or injuries resulted from 
this incident, a similar 
situation could result in 
a serious accident. 


During Highway transport, 
a cargo of high-value 
electronic equipment broke 
loose from the tie-down 
ropes aboard a truck and 
the equipment fell over 
onto the bed of the truck 
and some on to the side 
of the road. Two fuse 
distribution racks were 
destroyed. 


Causes 


An unauthorized modification, 
in that maintenance personnel 
replaced the 1/4" thick plas- 
tic shield on the instrumenta- 
tion panel with a 1/16" thick 
shield which warped and, dur- 
ing transport, vibrated enough 
to rub radioactive paint off 
the panel. Contributing was 
an inspection deficiency in 
that the shipment was not 
inspected and approved by 
the Radiological Safety 
Officer prior to dispatch. 

Procedural errors by both the 
trucker and the shipper. 
Trucking operator did not 
comply with procedures for 
proper tie-down and protec- 
tion of high-value/program- 
critical equipment while in 
transit, and the shipper 
did not notify the trucker 
that the load to be trans- 
ported was high-value/ 
critical, as required. Con- 
tributing cause was material 
failure in that the tie-down 
rope broke, because it was 
worn and not of required 
working strength. 


Recommended 
Pre vent i ve/Corr e c t i ve 
Action 


Prohibit substitution of non- 
standard materials in all 
critical hardware or flight 
equipment without prior approv- 
al. Require engineering hazard 
analysis prior to approving 
such material substitutions. 
Ensure that all radioactive 
shipments are labeled as haz- 
ardous and require inspection . 
and approval by Radiological 
Safety Officer. 


Require formal safety inspection 
of all packing and loading opera- 
tions involving high-value/ 
critical end- item hardware. Re- 
quire safety inspection of all 
trucks and certification of all 
drivers included in transport 
of high-value/critical end item 
hardware. Ensure that truckers 
are notified and aware of those 
shipments which contain high- 
value/critical end item hardware. 
Require safety inspection and 
verification of adequacy of tie- 
down ropes and cables. 



SECTION X 

TRANSPORT/HANDLING 


Accident/Incident 

Description 


Causes 


Recommended 

Preventive/Corrective 

Action 


83. During movement and posi- 
tioning of a stage trans- 
porter at a manufacturing 
facility, the driver backed 
the equipment into a 
stanchion, damaging the 
access ladder to the forward 
truck steering cab. 


Inadequate work control in 
that procedures requiring 
stanchion removal prior to 
moving vehicle were not 
followed and communications 
were relayed by both observ 
er and supervisor, causing 
driver misunderstanding. 


84. While guiding a hydraset to 
the floor in a manufacturing 
and assembly facility, employ- 
ee^ finger was caught between 


Inadequate work control since 
the load was set down before 
ascertaining that the indi- 
vidual guiding the operation 


the load and the floor, result- was clear and ready for load’s 
ing in the loss of 1-1/4 TT of contact with the floor, 
finger. 


Require checklist verification 
by move conductor or supervisor 
that all pre-move procedures 
have been followed prior to 
moving transporter or major end 
item hardware. Require one 
observer for each side during 
transporter movement and ensure 
that only one person relays 
instructions to driver. 

Require that procedures for low- 
ering and hoisting operations be 
periodically reviewed to assure 
they are adequate for current 
operations. Ensure that super- 
vision is adequate and present 
during such operations. 
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SECTION X 

TRANSPORT/HANDLINO 


Accident/incident 

Description 


Causes 


Recommended 

Preventive/Corrective 

Action 


While being transported 
from storage on a flat 
four-wheeled dolly, a 
VHF ranging console fell 
off when a dolly wheel 
slipped into a crevice 
at the entrance of an ele- 
vator, resulting in minor 
damage to the console, 
and injury (broken leg) 
to one employee . Exten- 
sive checkout testing 
had to be performed on 
the console. 

. During assembly of a 
thermal systems unit 
(TSU) , a cable assembly 
in the rigging hoisting 
tool failed when a swaged 
cable loop pulled loose, 
dropping the TSU cannister 
4 feet to the floor, 
causing minor structural 
damage. No personnel 
injuries. 


Inadequate procedures for 
handling and transporting 
high value equipment in that 
the load was not secured, 
the skid roller dolly was 
not an approved piece of 
equipment for transport of 
high value equipment, and 
clearance space between 
elevator and floor was not 
properly bridged. 


Material failure in that a 
swaged cable connection which 
had been properly proof tested 
8 weeks earlier suddenly 
failed under load. Contribut- 
ing causes were possible im- 
proper distribution of the 
load and possible contamina- 
tion of the cable sleeve 
with lubricant from the wire 
cable. 


Require that transport equipment 
be certified and approved for 
transport of critical hardware 
items and ensure periodic re- 
inspection. Require that formal 
procedures and checklists be 
utilized in movement of any 
critical hardware. 


Avoid the use of swaged cable 
connection in hoisting assemblies 
used for moving critical hardware. 
Require all such assemblies be 
designed with U-bolt wire rope 
clips for the cables. Establish 
procedures for safety inspection 
to verify proper condition of 
hoisting tools prior to each use. 
Determine CG for each load prior 
to lift and adjust rigs accordingly. 



Accident/incident 

Description 

During receiving operations, 
a vacuum pumping unit was 
being removed by forklift 
from a truck when the unit 
suddenly tipped toward and 
struck the truck bed, re- 
sulting in extensive ex- 
ternal and internal damage 
to the unit. 


During manufacturing, a 
launch vehicle digital 
computer page assembly 
was inadvertently dropped 
while being hand-carried 
in a process laboratory, 
resulting in minor damage 
to the assembly and a 
non- flightworthy dis- 
position. 


SECTION X 

TR ANSPO RT/HANDLINQ 


Causes 


The primary cause was in- 
adequate handling techniques 
in that the forklift opera- 
tor used forks which did not 
extend the full width of the 
shipping pallet and failed 
to detect the resulting load 
imbalance. Contributing 
causes were failure to mark 
the shipment as critical equip- 
ment and lack of supervision 
of critical handling operations. 


The primary cause was in- 
adequate handling techniques 
in that flight critical hard- 
ware was not protected from 
inadvertent damage during 
transport/handling. Con- 
tributing causes were fail- 
ure to designate the page 
assembly as flight critical, 
and failure to inform per- 
sonnel that the assembly was 
for flight use. 


Recommended 
Prevent I ve/Corrective 
Action 


Designate critical program 
equipment handling operations 
as safety critical and require 
training and certification of 
personnel. Require all pro- 
gram critical equipment to be 
clearly marked as such for 
shipment and ensure that such 
shipments are marked with CG 
locations and lifting points. 
Ensure adequacy of super- 
visory control during fork- 
lift handling of essential 
equipment, to ensure rise of 
correct fork lengths and atten- 
tion to load balance. 

Require positive protection of 
program critical hardware dur- 
ing transport/handling in 
process laboratories/facilities ; 
require use of padded carts 
in lieu of handcarry between 
process stations; minimize 
manual handling; ensure that 
critical hardware is identi- 
fied as such. 


SECTION X 

TRANSPORT/HANDLING 


Accident/Incident 

Description 


During manufacturing 
handling operations, 
the cover of a container 
holding a thin-walled 
spacecraft He tank hit 
the tank when a workman 
dropped it into the 
supposedly empty con- 
tainer. There was no 
damage. 

During the handling of a 
stage tank assembly, the 
forward and aft tank domes 
were damaged slightly by 
the tank handling rings. 


During shipping prepara- 
tion operations, out- 
gassed hydrogen/oxygen 
from a recently discharged 
silver/zinc battery in a 
hermetically sealed drum 
was ignited by a spark 
generated by the scraping 
of the battery against the 
side of the drum and ex- 
ploded, blowing the lid 
from the drum, charring 
dessicant bags within the 
drum, and causing minor 
injury to one person. 


Causes 


Personnel error in that no 
visual check of the shipping 
container content was made 
before dropping in the cover. 
Contributing was lack of ex- 
ternal markings indicating 
critical and fragile nature 
of contents. 


Inadequate maintenance and 
inspection of handling 
equipment since the heads 
of the screws which attach 
the rubber protective pads 
to the handling rings had 
surfaced through the pads 
and caused the scratches. 

Inadequate handling/trans- 
portation/storage techniques 
in that the battery was placed 
in the drum too soon after 
discharge; (it is character- 
istic o: silver/zino batteries 
to outgas both hydrogen arid 
oxygen for several hours after 
discharge). Also, trie battery 
was not secured insi.de the 
container. 


Recommended 
Prevent i ve/Co rrec t i ve 
Action 


Designate critical end item 
handling and transport opera- 
tions as safety critical and 
require all personnel involved 
to be trained and certified. 
Require visual verification of 
contents prior to moving or 
inserting anything into equip- 
ment containers. 


Ensure adequate maintenance of 
specialized equipment used with 
flight hardware, and require a 
pre-use inspection. 


Ensure silver/zinc battery ship- 
ment procedures require a delay 
of not less than 48 hours after 
discharge before sealing in 
shipping container. Require 
batteries to he secured inside 
snipping containers. 



SECTION X 
TRANSPORT/HANDLING 


Accident/Incident 

Description Causes 


Recommended 

Preventive/Corrective 

Action 


During transport opera- Personnel error in that the 

tians a parked, un- driver failed to secure the 

attended tractor-trailer parked vehicle in accordance 

rig containing high with approved procedures, 

value flight support 
equipment rolled down- 
grade through a fence, 
causing minor damage 
to the rig, but no 
damage to the cargo. 


Require use of a checklist 
for operation and parking of 
transport vehicles containing 
program critical/high-value 
hardware, and establish a 
safety training and awareness 
program for drivers to motivate 
compliance. 


APPENDIX 


GLOSSARY OF 

ABBREVIATIONS, ACRONYMS AND TERMS 


ACE 

AS I 

ASME 

CG 

CO? 

CRS 

DB 

ECS 

EO 

GH 2 

GNo 

gsf 

He 

Hz 

KOH 

LH2 

ln 2 

LOX 

N2O4 

LUT 

ob 

PS I 

PS I A 

PSIG 

QC 

QD 

Q&RA 

RCS 

R&D 

RF 

RPM 

SCAPE 

SCFM 

TC 

TCD 

TCP 

TPS 

TPI 

TV 

TVD 

UDMH 

VDC 


Automatic Checkout Equipment 

Apollo Standard Initiator 

American Society of Mechanical Engineers 

Center of Gravity 

Carbon Dioxide 

Cold Rolled Steel 

Design Burst 

Environmental Control System 
Engineering Order 
Gaseous Hydrogen 
Gaseous Nitrogen 
Ground Support Equipment 
Helium 
Hertz (cps) 

Potassium Hydroxide 
Liquid Hydrogen 
Liquid Nitrogen 
Liquid Oxygen 
Nitrogen Tetroxide 
Launcher Umbilical Tower 
Oxygen 

Operational Checkout Procedure 

Pounds Per Square Inch 

Pounds Per Square Inch Absolute 

Pounds Per Square Inch Gauge 

Quality Control 

Quick Disconnect 

Quality and Reliability Assurance 

Reaction Control System 

Research and Development 

Radio Frequency 

Revolutions Per Minute 

Self Contained Atmospheric Protective Ensemble 

Standard Cubic Feet Per Minute 

Test Control/Test Conductor 

Test Checkout Directive 

Test Checkout Procedure 

Test Preparation Sheet 

Threads Per Inch 

Television 

Toxic Vapor Disposal 
Unsymmetrical Dimethylhydrazine 
Volts, Direct Current 
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APPENDIX (CONTINUED) 


Accident 

Incident 

Cryogenics 

11 D" Wo ter 
Dewar 

Hardware - 

Software 

"Hoke" Bottle 

"K" Bottle 
"Kluge" 

Program Phase 

Program Activities- 


A type A or B mishap as defined in the NASA 
Safety Manual, NHB 1700.1 (VI) 

A mishap of less than accident severity as 
defined in the NASA Safety Manual, 

NHB 1700.1 (VI) 

The science of producing and the application 
of low temperature processes below minus 
150° F and the techniques involving handling, 
storage and usage of liquified gases. Examples 
are hydrogen, oxygen and helium. 

Distilled water. 

A double walled metal vessel or tank, with 
an evacuated space between walls, used for 
storing fuels and propellants in a liquid state. 

Any program component, subsystem, system, 
module, stage or vehicle, plus any facility 
equipment and property, ground support 
equipment (GSE) and other used in direct support 
of program hardware. 

Any formalized written policy, directive, 
procedure, plan, specification, requirement or 
analysis prepared as an essential tool in the 
conduct of program activities. 

A small pressure vessel or container used in 
obtaining, handling and transporting gases 
and liquids for sampling,, 

A portable pressure cyli nder or tank commonly 
used as a pressure source. 

A frequently used sTang term for a temporary or 
unauthorized installation. 

The four phases of a major research and development/ 
operations program as defined in the NASA Phased 
Project Planning Guidelines, NHB 7121.2, August 
1968 Edition. 

Tasks, work, functions and responsibilities associated 
with program hardware dev elopment/operat ions as 
defined in NASA Phased Project Planning Guidelines, 
NHB 7121.2, August 1968 Edition. 
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